<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="398">
<package pkgid="54c5868654ca3e9cd4da9702d72af96d297c422c1c473ae13b9d4e4d08b5386e" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="19.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-10" date="1493985600">- Bump version to 1.3.6.1-10
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default val 
- Resolves: Bug 1111400 - logconv.pl lists sasl binds with no dn as anonymous 
- Resolves: Bug 1377452 - Integer overflow in performance counters
- Resolves: Bug 1441790 - ldapserch for nsslapd-errorlog-level returns incorrect values
- Resolves: Bug 1444431 - ERR - symload_report_error - Netscape Portable Runtime error -5975
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-11" date="1493985601">- Bump version to 1.3.6.1-11
- Resolves: Bug 1410207 - Utility command had better use INFO log level for the output
- Resolves: Bug 1049190 - Better input argument validation and error messages for db2index and db2index.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985602">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985603">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.19-1" date="1503316800">- Bump version to 1.3.6.19-1
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
</package>
<package pkgid="5a9cc14ff35cb0cd3415986ff1cceaf483480971a80aabcd143c5344d292b3f2" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="21.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-12" date="1493985600">- Bump version to 1.3.6.1-12
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-13" date="1493985601">- Bump version to 1.3.6.1-13
- Resolves: Bug 1444938 - Fix backport issue from build 1.3.6.1-10 (part 2)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-14" date="1495195200">- Bump version to 1.3.6.1-14
- Resolves: Bug 1450910 - Modifying "nsslapd-cache-autosize" parameter using ldapmodify command is failing.
- Resolves: Bug 1450893 - When nsslapd-cache-autosize is not set in dse.ldif, ldapsearch does not show the default value
- Resolves: Bug 1449098 - ns-slapd crashes in role cache creation
- Resolves: Bug 1441522 - AddressSanitizer: heap-use-after-free in libreplication-plugin.so
- Resolves: Bug 1437492 - "ERR - cos-plugin - cos_cache_query_attr - cos attribute krbPwdPolicyReference failed schema check" in error log
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1451657 - -v option is not working for db2ldif.pl</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
</package>
<package pkgid="5ea6b5fd02be53efb1cae82a66b784dd0f8bd9b69f47fc62d776900a093d1f23" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="24.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-15" date="1495540800">- Bump version to 1.3.6.1-15
- Resolves: Bug 1429770 - ds-logpipe.py crashes for non-existing users
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify 
- Resolves: Bug 1357682 - RHDS fails to start with message: "Failed to delete old semaphore for stats file"
- Resolves: Bug 1452739 - Zero value of nsslapd-cache-autosize-split makes dbcache to be equal 0</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-16" date="1496750400">- Bump version to 1.3.6.1-16
- Resolves: Bug 1444938 - nsslapd-allowed-sasl-mechanisms doesn't reset to default values without a restart
- Resolves: Bug 1447015 - Adjust db2bak.pl help and man page to reflect changes introduced to the script
- Resolves: Bug 1450896 - Manual resetting of nsslapd-dbcachesize using ldapmodify
- Resolves: Bug 1454921 - Fixup memberof task throws error "memberof_fix_memberof_callback: Weird
- Resolves: Bug 1456774 - ipa-replica server fails to upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
</package>
<package pkgid="806f658b8e5af17306ecdf213dc0f8c52a9d6877b7e7e4b1fe314b0f3eda49db" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="26.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-17" date="1501502400">- Bump version to 1.3.6.1-17
- Resolves: Bug 1476161 - replication halt - pending list first CSN not committed, pending list increasing
- Resolves: Bug 1476162 - Change the retrochangelog default cache size</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-18" date="1502193600">- Bump version to 1.3.6.1-18
- Require srvcore 4.1.3
- Resolves: Bug 1479757 - dse.ldif and fsync
- Resolves: Bug 1479755 - backup fails if changelog is enabled
- Resolves: Bug 1479756 - Locked account provides different return code if password is correct</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-25
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
</package>
<package pkgid="34d8ad3a52191acfbb98f9bb6aa734038e2bfe6607031fab5000feee2dac97b7" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="28.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-19" date="1503316800">- Bump version to 1.3.6.1-19
- Remove old mozldap and db4 requirements
- Resolves: Bug 1483865 - Crash while binding to a server during replication online init</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
</package>
<package pkgid="6fc36f0eef26e2b9716182d43ce8d3fbc692ca6f4812dfc32a1ec410296ebbbe" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.6.1" rel="29.el7_4"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-20" date="1505736000">- Bump verions to 1.3.6.1-20
- Resolves: Bug 1489693 - PasswordCheckSyntax attribute fails to validate cn, sn, uid
- Resovles: Bug 1492829 - patch should of been applied to 7.4 but got missed
- Resolves: Bug 1486128 - Performance issues with RHDS 10 - NDN cache investigation
- Resolves: Bug 1489694 - crash in send_ldap_result
- Resolves: Bug 1491778 - crash when adding invalid repl agmt
- Resolves: Bug 1492830 - password expired control not sent
- Resolves: Bug 1492833 - sasl-mechanisms removed during upgrade</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-21" date="1507204800">- Bump verions to 1.3.6.1-21
- Resolves: Bug 1498958 - unable to retrieve specific cosAttribute when subtree password policy is configured</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-22" date="1507550400">- Bump version to 1.3.6.1-22
- Resolves: Bug 1499668 - Errors log filled with attrlist_replace</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-23" date="1509105600">- Bump version to 1.3.6.1-23
- Resolves: Bug 1504536 - [memberOf Plugin] bulk deleting users causes deadlock when there are multiple backends
- Resolves: Bug 1503001 - Adding a database entry fails if the same database was deleted after an import
- Resolves: Bug 1506912 - Improve valueset sort performance during valueset purging</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-24" date="1510315200">- Bump version to 1.3.6.1-24
- Resolves: Bug 1508978 - replicated MODRDN fails breaking replication
- Resolves: Bug 1511940 - heap corruption during import
- Resolves: Bug 1510319 - [abrt] 389-ds-base: SLL_Next(): ns-slapd killed by SIGSEGV 
- Resolves: Bug 1509347 - cleanallruv task is not logging any information</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-25" date="1513598400">- Bump version to 1.3.6.1-25
- Resolves: Bug 1526928 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1523505 - opened connection are hanging, no longer poll
- Resolves: Bug 1523507 - IPA server replication broken, after DS stop-start, due to changelog reset</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-26" date="1516104000">- Bump version to 1.3.6.1-26
- Resolves: Bug 1534430 - crash in slapi_filter_sprintf</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-27" date="1518523200">- Bump version to 1.3.6.1-27
- Resolves: Bug 1536343 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1535539 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp function
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-28" date="1519646400">- Bump version to 1.3.6.1-28
- Resolves: Bug 1540105 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.6.1-29" date="1520856000">- Bump version to 1.3.6.1-29
- Resolves: Bug 1553602 - ipa-server-install fails with Error: Upgrade failed with no such entry [rhel-7.4.z]</changelog>
</package>
<package pkgid="ec498f7432908289a0257eb81e5ad8e90be52baace2cb3686a5559fae6c9bc3f" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6fe1389655f6090d85831e03aab3fb399728ea03fa264d82c51607e528fbb1fd" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0" rel="11.el7_4"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-2" date="1494936000">- core: fix persisting managed state of device (rh #1440171)
- proxy: fix use-after-free (rh #1450459)
- device: don't wrongly delay startup complete waiting for carrier (rh #1450444)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-3" date="1495195200">- dhcp: don't add route to DHCP4 server (rh #1448987)
- libnm: fix NUL termination of device's description (rh #1443114)
- libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
- core: fix device's UDI property on D-Bus (rh #1443114)
- ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-4" date="1495454400">- device: update external configuration before commit (rh #1449873)
- bluetooth: fix crash on connecting to a NAP (rh #1454385)
- device: release removed devices from master on cleanup (rh #1448907)
- core: activate slaves using ifindex order by default (rh #1452585)
- nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)
- po: update translations (rh #1382625)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-5" date="1496404800">- ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
- tui: fix crash during connect (rh #1456826)
- libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-6" date="1496750400">- connectivity: fix periodic connectivity check (rh #1458399)
- bond: improve option matching on daemon restart (rh #1457909)
- device: fix touching device after external activation (rh #1457242)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-7" date="1497009600">- bond: fix crash comparing mode while generating bond connection (rh #1459580)
- connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
- device: persist nm-owned in run state (rh #1376199)
- device: fix assuming master device on restart (rh #1452062)
- device: apply route metric penality only when the default route exists (rh #1459604)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-8" date="1497268800">- cli: fix output of iface in overview output (rh#1460219)
- ppp: unexport NMPPPManager instance on dispose (rh#1459579)
- cli: remove spurious device names from wifi subcommands output (rh#1460527)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-9" date="1497355200">- device: don't change MTU unless explicitly configured (rh #1460760)
- core: don't remove external IPv4 addresses (rh #1459813)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.8.0-10" date="1505217600">- core: fix for MAC change after master reactivation (rh #1490741)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.8.0-11" date="1507291200">- core: fix wrongly delaying startup-complete for unrealized devices (rh#1498807)
- core: fix unfreezing signals when unrealizing device fails (rh#1498755)</changelog>
</package>
<package pkgid="6986e4713e67267be6b1f31f08c89bc9abd524990e44ab6ba1efa0b2c6cc3dff" name="accountsservice-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="b598d756e1dbafbaed26ced1684c704e83adef69665317bdae95237caf27e7ef" name="accountsservice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.45" rel="3.el7_4.1"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.6.35-9" date="1433764800">- Start after nsswitch and ypbind
  Resolves: #1217439</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-10" date="1467288000">- scale to a large number of remote users better
  Resolves: #1220904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-11" date="1467374400">- address minor bug in previous patch
  Related: #1220904

- fix memory leak in log handler
  Resolves: #1292543</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.35-12" date="1473163200">- hide users with /sbin/nologin shell
  Resolves: #1341276</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.42-1" date="1476964800">- Update to 0.6.42
- Resolves: #1424623</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.42-2" date="1490616000">- Update to 0.6.44
  Related: #1424623
- export password expiration policy from shadow
  Resolves: #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-1" date="1490616001">- Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
  Related: #1424623 #1334464</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-2" date="1494849600">- Don't tread explicitly requested users as cached
  Fixes UncacheUser operation.
  Resolves: 1446620
  Related: #1432602</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3" date="1506513600">- Various fixes to increase scalability
  Related: #1474579</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.6.45-3.1" date="1509710400">- Fix crasher introduced in -3
  Related: #1474579, 1509261</changelog>
</package>
<package pkgid="396077fe38f5fe26dbc77054e714ba8e2bf0b4159ff98edcc9bc0df69957be20" name="apr-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="90f89d3da1548cffdbec0840f75dd6a5b3227dedb42d44ba78f3b4406c9f85b8" name="apr-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.8" rel="3.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-2" date="1341576000">- pull fix for apr_mcast_hops from upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-3" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-4" date="1353585600">- update license</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-3.1" date="1509364800">- Resolves: #1507349 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="6977fafa63537f85b7a98652cf12806f294bd2399dc89a92a187d4b17c1d95db" name="at-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="22.el7_4.2"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-13" date="1373544000">- rebuild with ? in dist
- Resolves: rhbz#983255</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22.2" date="1513771200">- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
</package>
<package pkgid="bcf964eea2c63e9113d69afb03ef22e9bae419a293de2b5885591b84c30b8964" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="3ec0cedb92313fd6ef11afc18e4c1f12dd7a465b353c766d95a6e55dac2a2ff5" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-11" date="1392897600">- Add patch for Yum, split exclude lines (RHBZ#1067039)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
</package>
<package pkgid="459309605788cea8bb7e50056a233d7188abfc2cb56f553dddef5fc9a93a9a96" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="c2d1fe31cdf126d519341e5f219c23e961824c33e2af199cf3a6cdf706562875" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="2.el7_4.2"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-12" date="1393329600">- Add patch for Dovecot, mailbox and quote support (RHBZ#1064387)
- Add patch for Keepalived, virtual server fixes (RHBZ#1064388)
- Add patch for Krb5, parse braces in values (RHBZ#1066419)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-13" date="1409832000">- aug_save: return error when unlink fails (RHBZ#1091143)
- augtool: add aliases to autocomplete (RHBZ#1100076)
- augtool: remove unused dump-xml arg (RHBZ#1100106)
- Automounter: parse hostnames with hyphens (RHBZ#1075162)
- Cgconfig: parse other valid controllers (RHBZ#1112543)
- Chrony: add lens (RHBZ#1071947)
- docs: update man page with new commands (RHBZ#1100077)
- Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
- Httpd: parse continued, quoted lines (RHBZ#1100551)
- Ldso: parse hwcap lines (RHBZ#1102629)
- NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
- Rmt: add lens (RHBZ#1100549)
- Services: permit colons in service name (RHBZ#1121527)
- Shellvars: support arithmetic expansion (RHBZ#1100550)
- Syslog: parse TCP loghosts (RHBZ#1129386)
- Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
- Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
- Systemd: parse quoted environment vars (RHBZ#1100547)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.1" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481545)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-2.el7_4.2" date="1505995200">- Sudoers: recognize "match_group_by_gid" (RHBZ#1493005)</changelog>
</package>
<package pkgid="cba831a94fdb7f6fab2338f2cc4f33daf00ae7c724d247f81140237d2e9a9dac" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011200">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4.1" date="1508414401">- bz1515311 - Automount cannot access host shares after a reboot [rhel-7.4.z]
  - reset master map list on startup retry.
- Resolves: rhbz#1515311</changelog>
</package>
<package pkgid="a5bee9dadbb1c607ab9db6fb2b38d9fbddc0fc8834140bf5b8472c6a9f312537" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="70.el7_4"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-60" date="1490011200">- bz1382093 - Improve logging in autofs
   - add the mount requestor's pid to pending_args.
   - create thread-local ID for mount attempts.
   - log functions to prefix messages with attempt_id if available.
   - factor out set_thread_mount_request_log_id().
   - add config option to use mount request log id.
- Resolves: rhbz#1382093</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-61" date="1490011201">- bz1101782 - autofs configured with sssd is not finding any maps
  - work around sss startup delay.
  - add sss master map wait config option (wait initially 0, disabled).
- Resolves: rhbz#1101782</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-62" date="1490616000">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - use autofs_point to store expire timeout where possibe.
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-63" date="1490875200">- bz1101782 - autofs configured with sssd is not finding any maps
  - fix work around sss startup delay.
- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix possible NULL derefernce.
- Related: rhbz#1101782 rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-64" date="1492430400">- bz1440769 - autofs is facing scalability issues
  - improve scalability of direct mount path component creation.
- Resolves: rhbz#1440769</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-65" date="1493035200">- bz1367576 - [RFE] Add browsing support into autofs for AMD format maps
  - fix invalid reference in remount_active_mount().
- Related: rhbz#1367576</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-66" date="1493985600">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - increase worker thread per-thread stack size.
  - limit getgrgid_r() buffer size.
  - add congigure option for limiting getgrgid_r() stack usage.
  - use above option to limit getgrgid_r() stack usage with configure.
- Resolves: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-68" date="1496404800">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix unset tsd group name handling.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-69" date="1496404801">- bz1435736 - autofs fails with kernel: automount[3386]:
    segfault at 7f3fb7595ca8 ip 00007f3fb61e353a sp 00007f3fb7595cb0
    error 6 in libc-2.17.so[7f3fb60b7000+1b6000]
  - fix a couple of covarity warning resulting in group name handling change.
- Related: rhbz#1435736</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-70.el7_4" date="1508414400">- bz1503945 - autofs option parsing for maps with fstype=autofs no longer
  works [rhel-7.4.z]
  - revert fix argc off by one in mount_autofs.c.
- bz1503946 - autofs map entry options field does not accept dot character
  [rhel-7.4.z]
  - allow dot in OPTIONSTR value lexer pattern.
  - handle additional nfs versions in mount_nfs.c.
- Resolves: rhbz#1503945 rhbz#1503946</changelog>
</package>
<package pkgid="a2584cae5957b8ea25252418c27c353d8abd6ca75542a5811dae8882b9ee69f4" name="bash-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="29.el7_4"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-20" date="1468324800">- Fix a crash when lastpipe mode is enabled
  Resolves: #1326302</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-21" date="1476273600">- Fix a crash in trap signal handling
  Resolves: #1372806</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-22" date="1486641600">- Avoid crash in parameter expansion while expanding long strings
  Resolves: #1403255</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-23" date="1486641601">- Add a condition before setting pipeline_pgrp to shell_pgrp
  Resolves: #1377496</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-24" date="1486641602">- Recognize cd -e
  Resolves: #1267478</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-25" date="1486641603">- Plug a leak related to compound assignments
  Resolves: #1264101</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641604">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
</package>
<package pkgid="d624ad828fd303e0833e7116827109261a23386b48b6d907747b55675d3a00f6" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="010363e1c3a3b820d5077bc6e3b9c104a4434b0586d126e093cff0e47901dfa4" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-43" date="1488196800">- Do not warn on WKS patch (#1392362)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
</package>
<package pkgid="687ccea516edb601e07c9d804ec28d3f3f2306e7986267af30c0faf6fa97d155" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="0e4f9f6f632a3e6e61965952a2f1732ceb59909762c87a89634aa653dc55c7ed" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.9.4" rel="51.el7_4.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-44" date="1489492800">- Backported new upstream dyndb interface, removed dynamic_db (#1393886)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-45" date="1489665600">- Install again dns/dlz.h skipped in rebase
- Fixed coverity warnings on reenabled test dlzexternal</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-46" date="1490702400">- Make comment how to use different config file (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-47" date="1490788800">- Simplify change of used config file, point to KB article (#1271315)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-48" date="1491912000">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-49" date="1492689600">- Address deadlock between view.c and adb.c (#1416304)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-50" date="1495454400">- Update root servers and trust anchor (#1452635)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.1" date="1508500800">- Fix named-chroot restart leak (#1504700)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.9.4-51.2" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="3babc7e95a60b478494452d7d75ab64897c0c7a96435fb4c3e46fbf5d9c57576" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="8be23e353b78108e219116e78d4cc6932b7123e4192b312d80262d235996c8c2" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-22-base" date="1470657600">- Fix date format bug in changelog which was preventing package build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
</package>
<package pkgid="5d45f90210a610b3f493e3a580ece9c8b94019bf42bacafb3679f408b863f3e0" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="898acbbdc0e150eaf7ab18cf137a0f74399a7afd393b04af5a3539fd73027c5a" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.25.1" rel="32.base.el7_4.2"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-23-base" date="1483704000">- Add code to detect attempts to link PIE and non-PIE S390 binaries.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-24-base" date="1483704001">- Fix thinko in previous patch.
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-25-base" date="1484568000">- Fix GOLD so that it will not warn about references to hidden symbols in shared objects.
  (#1326710)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-26-base" date="1484568001">- Speed up displaying disassembly when mixed with source code.
  (#1311352)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-27-base" date="1493294400">- Fix infnite loop in linker when counting PowerPC stubs.
  (#1406498)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-28-base" date="1493899200">- Disable fix for 1406430.  It breaks building real s390 executables.
  (#1447209)
  (#1406430)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-31.base" date="1494331200">- Fix generation of PLT entries for s390 binaries.
  (#1440168)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base" date="1498824000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1465318)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.1" date="1502280000">- Revert part of the objdump speed up patch which was preventing proper function name lookup.
  (#1479773)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.25.1-32.base.2" date="1511179200">- Fix a seg-fault in the PowerPC linker when discarding .plt sections when -pie is used and undefined weak symbols are present.  
  (#1515347)
- Add SCV, RFSCV amd LNIA instructions to Power9 port of gas.
  (#1449585)</changelog>
</package>
<package pkgid="77fac2898d62d37389b9d92af255c4a22dd19132b6f1467262158d408c2c739b" name="bluez-debuginfo" arch="i686">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="3b7e82a440c20b3b4292202b7db5603030554315240ab4465ed4cacc0c80af2c" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.44" rel="4.el7_4"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 5.23-1" date="1426766400">- Update to 5.23
- Resolves: #1174545</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; 5.23-2" date="1436356800">- Rebuild against updated libical
- Related: #1209787</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-3" date="1436356801">- Enable hardened build
Resolves: #1174545</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 5.23-4" date="1436529600">- Build with --enable-fpie as well
Resolves: #1174545</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.39-1" date="1463572800">- Update to 5.39
Resolves: #1263638 #1296616</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.41-1" date="1470398400">- Update to 5.41
- obexd fixes to prevent crashes
- add /etc/bluetooth/main.conf config file
Resolves: #1313363, #1336476, #1338895</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-1" date="1490097600">- Update to 5.44
- Ship btattach tool
- Configure systemctl settings for bluez-obex correctly
- Add Provides: bluez-obexd
Resolves: #1434581, #1401501</changelog>
  <changelog author="David Arcari &lt;darcari@redhat.com&gt; 5.44-2" date="1490616000">- added missing updates for sources and .gitignore
Resolves: #1434581, #1401501</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-3" date="1505131200">- sdpd heap fix
Resolves: #1490010</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 5.44-4" date="1505131201">- forgot to bump rev
Resolves: #1490010</changelog>
</package>
<package pkgid="ef3e8fb7c64c0e22401215804ca417eda4bf3e3072ca621e807c453144592662" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="27f58033d63f2de06ef5a1e00b088e4feb37a85221ed0f9196a06fb1baa15774" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="9.el7_4.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-2" date="1470312000">- Resolves: rhbz#1363654

- Config: Flag config uidgid entries (rhbz#1363654)
- merge upstream commit f837f95dfe96d60f2367e900efd4def7a07b2a89 (rhbz#1363654)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-3" date="1470312001">- Related: rhbz#1363654

- Enhance spec so corosync-qdevice subpackage depends on same version of
  the corosync and corosynclib packages.</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.1" date="1501675200">- Resolves: rhbz#1477461

- main: Add option to set priority (rhbz#1477461)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1477461)
- main: Add support for libcgroup (rhbz#1477461)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1477461)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9.2" date="1503576000">- Resolves: rhbz#1484264

- totem: Propagate totem initialization failure (rhbz#1484264)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1484264)
- totemcrypto: Refactor symmetric key importing (rhbz#1484264)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1484264)
- totemcrypto: Use different method to import key (rhbz#1484264)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1484264)
- totemcrypto: Fix compiler warning (rhbz#1484264)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1484264)</changelog>
</package>
<package pkgid="ab8b281c718ad0c8988416734ff923258a9f35aa2a48ab39f3cdef5898edec31" name="cpio-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.11" rel="25.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.11-16" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-17" date="1363003200">- fix small memory leak in copyin.c (#919454)
- remove %defattr and install 'cpio' to real %{_bindir}
- CovScan: add %{?_rawbuild}</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-18" date="1363089600">- explicitly provide /bin/cpio for packages that are dependant on this file</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-19" date="1363348800">- revert the fix for memory leak (at least for now) #921725</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-20" date="1364385600">- fix another bogus date in changelog
- update config.guess/config.sub for aarm64 build (#925189)
- run autoreconf instead of autoheader</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.11-22" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-23" date="1432123200">- better check for read() error (rhbz#1138148)
- fix ru translation (rhbz#1075513)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-24" date="1436356800">- fix for CVE-2014-9112</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.11-25" date="1486382400">- fix crc checksum for files ~200M+ (rhbz#1415081)</changelog>
</package>
<package pkgid="f26df4759c8ad3f6c0dbd650f9a99b424ad6aaddb3644b78af0f4def983f3ac3" name="cryptsetup-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="7c9bfe3653f020d0a3415c72192bb6923d2dd8d559f151d913f59a308f9d1902" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="3.el7_4.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.3-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-1" date="1410177600">- Update to cryptsetup 1.6.6.
- Resolves: #1117372 #1038097</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-2" date="1411992000">- patch: fix failures related to reencrypt log files
- Resolves: #1140199</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.6-3" date="1418904000">- drop FIPS power on self test and library checksum
- Resolves: #1158897</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.6.7-1" date="1434628800">- Update to cryptsetup 1.6.7.
- patch: avoid use of kernel crypto API socket which is known
  to be broken in RHEL7.0 kernel (7.1+ is fine).
- Resolves: #1206170</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.2-1" date="1465300800">- Update to cryptsetup 1.7.2.
- Resolves: #1302022 #1070825</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-1" date="1489579200">- Update to cryptsetup 1.7.4.
- Resolves: #1381273</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-2" date="1491307200">- patch: fix access to unaligned hidden TrueCrypt header.
- Resolves: #1435543</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3" date="1493121600">- patch: fix luksFormat failure while running in FIPS mode.
- Resolves: #1444137</changelog>
  <changelog author="Ondrej Kozina &lt;okozina@redhat.com&gt; - 1.7.4-3.el7_4.1" date="1510833600">- patch: fix regression in blockwise functions (archs with 64 KiB
  page_size)
- Resolves: #1510841</changelog>
</package>
<package pkgid="88d4bb9405d1345a4695a35b3cf554601f0b069ea6663e0198597cd0838eb104" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="b7a6e76cc1776fa1431e450fcf56c977e371a36fc981a5fa5aef51da4b6099e2" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="42.el7_4.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-34" date="1471435200">- acknowledge the --no-sessionid/CURLOPT_SSL_SESSIONID_CACHE option
  (required by the fix for CVE-2016-5419)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-35" date="1472212800">- fix incorrect use of a previously loaded certificate from file
  (related to CVE-2016-5420)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-36" date="1474372800">- reject negative string lengths in curl_easy_[un]escape() (CVE-2016-7167)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-37" date="1475755200">- fix tight loop in non-blocking TLS handhsake over proxy (#1388162)
- handle cookies with numerical IPv6 address (#1341503)
- make libcurl recognize chacha20-poly1305 and SHA384 cipher-suites (#1374740)
- curl -E: allow to escape ':' in cert nickname (#1376062)
- run automake in %prep to avoid patching Makefile.in files from now on</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-38" date="1486641600">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-39" date="1488369600">- work around race condition in PK11_FindSlotByName() in NSS (#1404815)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-40" date="1490616000">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-41" date="1490788800">- make FTPS work with --proxytunnel (#1420327)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.29.0-42" date="1490788801">- fix use of uninitialized variable detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-42.el7_4.1" date="1508760000">- fix buffer overflow while processing IMAP FETCH response (CVE-2017-1000257)</changelog>
</package>
<package pkgid="4a6f7e5ba07a202d35efafc7d147b70ad9a7d959ae337d2fa3c420f0e2b4f5b5" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="84613d23e562479d919213421017c0e6b13b504f3ee63fbd610e2b6038162582" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="111.el7_4.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-104" date="1489060800">- Change _pkgconfdir from /usr/share/pkgconfig to /usr/lib/pkgconfig
- Modify 0209-UPBZ-1430097-multipath-C-API.patch
  * change _pkgconfdir and fixed double-closing fd
- Add 0211-RH-strlen-fix.patch
  * checks that variables are not NULL before passing them to strlen
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-105" date="1489147200">- fix specfile issue
- Related: bz #1430097</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-106" date="1490356800">- Add 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1431562</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-107" date="1491220800">- Modify 0197-RHBZ-1394059-max-sectors-kb.patch
  * Make multipath only change max_sectors_kb on creates. On reloads, it
    just makes sure the new path matches the multipath device.
- Refresh 0198-RHBZ-1372032-detect-path-checker.patch
- Refresh 0201-RHBZ-1403552-silence-warning.patch
- Refresh 0206-RHBZ-1239173-pt2-no-paths.patch
- Refresh 0207-UP-add-libmpathcmd.patch
- Refresh 0212-RHBZ-1431562-for-read-only.patch
- Resolves: bz #1394059</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-108" date="1493121600">- Add 0213-RHBZ-1430908-merge-dell-configs.patch
- Resolves: bz #1430908</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-109" date="1493121601">- Add 0214-RHBZ-1392115-set-paths-not-ready.patch
  * Set ENV{SYSTEMD_READY}="0" on multipath path devices
- Resolves: bz #1392115</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-110" date="1494590400">- Add 0215-RHBZ-1444194-fix-check-partitions.patch
  * make sure kpartx partions match the correct device
- Add 0216-RHBZ-1448562-fix-reserve.patch
  * don't join threads that haven't been created
- Add 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * blacklist db2.* devices
- Add 0218-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1444194, #1448562, #1437329, #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.1" date="1510142400">- Add 0218-RHBZ-1510837-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1510834-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0220-RHBZ-1510834-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Add 0221-RHBZ-1510839-nimble-config.patch
- Resolves: bz #1510834, #1510837, #1510839</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111.2" date="1511179200">- Modify Add 0220-RHBZ-1510834-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1510834</changelog>
</package>
<package pkgid="fba3fe4544d25638423d7704e34e70d110f497691ad2218097d1bc51fd290f5a" name="device-mapper-persistent-data-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="0.1.rc6.el7_4.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc6" date="1457524800">- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc8" date="1462363200">- Fixes for thin_trim and thin_repair.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-1" date="1468238400">- Fixes providing proper use of compiler flags.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-2" date="1469102400">- Improve documentation and messages on output file preallocation
  when using thin_repair and thin_restore.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.3-1" date="1469188800">- Fix regression in thin_repair and thin_restore so it works again
  when using device as output.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc3" date="1489665600">- Update to latest upstream release including various bug fixes and new features.
- New thin_show_duplicates command.
- Add '--skip-mappings' and '--format custom' options to thin_dump.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc4" date="1490097600">- Add support for cache metadata format version 2 in cache tools.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc5" date="1490184000">- Switch to a faster implementation of crc32 used for checksums.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.7.0-0.1-rc6" date="1490616000">- Don't open devices as writeable if --clear-needs-check-flag is not set.
- Fix cache metadata format version 2 superblock packing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.0-0.1-rc6.el7_4.1" date="1511179200">- Fix v2 metadata corruption in cache_restore.</changelog>
</package>
<package pkgid="e65456ebd1e43255ef88e9ac81340a110788f2dec1dbea09e6d9642150f53892" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="5203124f7fc0e2a8f89b987b4eb89885519864c1caad9e82343533ade03772d8" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.1"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-48" date="1487246400">- Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
  restarts by NetworkManager dispatcher.d script</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-49" date="1487246401">- Resolves: #1355827 - dhcpd has a segfault at startup with a big ip range</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246402">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
</package>
<package pkgid="afff92462fa1e8a7067ac0990c58ba42214ed8a131906e6d6bf87bd3c24bd506" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="cd7dc3606208e6cdea4d4e3adf8dd9738e9faba98dec3ea416c29c23f1e81970" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-50" date="1487246400">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
</package>
<package pkgid="b2e6ed77248bb6184140395165285de450c1f999678bf12d51c5b4ac1e6eebc1" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="fb9b2b906c19874f15e8f6ab726ce4dfdda261c1f2fd5aad7f5d337904438ed6" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="58.el7_4.4"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-51" date="1490616000">- Resolves: #1349044 - add /etc/dhcp/scripts directory for on-commit scripts</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.2.5-52" date="1490616001">- Resolves: #1349044 - move /etc/dhcp and /etc/dhcp/scripts to dhcp-common
  subpackage</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-53" date="1493726400">- Fix ownership of /etc/dhcp to allow daemon access it</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-55" date="1493899200">- Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
- Fix syntax error in attr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-57" date="1493899201">- Move scripts to dhcp package
- Do not relax permissions of scripts as we don't need this now</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58" date="1494936000">- Resolves 1374119: Add dns server variable to azure-cloud.sh script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.1" date="1513166400">- Resolves: #1523475 - Fix omapi socket descriptors leak</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-58.2" date="1519819200">- Resolves: #1549979 - CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1550000 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
</package>
<package pkgid="651cb794f9f3c06b15f5b4cacdfa37af0981c1745538e535e693b780897046ed" name="dleyna-server-debuginfo" arch="i686">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="90d1c2f3ee7d34afafa14dcba74e9a90630a0984bb69fe6109a2e5857aa0a9b9" name="dleyna-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="2.el7_4"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.0-1" date="1433246400">- Initial RHEL import
Resolves: #1219532</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-1" date="1488542400">- Update to 0.5.0
Resolves: #1386847</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.5.0-2" date="1507204800">- Use arch-specific Requires on dleyna-connector-dbus
Resolves: #1479486</changelog>
</package>
<package pkgid="dc27bbafd9fca8b935162246dd13c3e2d4d002f5bd7a296b8aad6f9cb74805be" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="2.el7_4.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-16" date="1464609600">- Resolves: #1275626 - use the patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-17" date="1464696000">- Resolves: #1275626 - modify the patch using new information</changelog>
  <changelog author="root - 2.66-18" date="1472212800">- Resolves: #1358427 - dhcp errors with hostnames beginning with numbers</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-19" date="1473163200">- Resolves: #1367772 - dns not updated after sleep and resume laptop</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-20" date="1473336000">- Related: #1367772 - additional upstream patch</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.66-21" date="1473768000">- Related: #1367772 - fix dns server update</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-1" date="1487678400">- Rebase to 2.76 (#1375527)
- Include also dhcp_release6 (#1375569)
- Fix compilation warnings
- Correct manual about interface aliases, warn if used without --bind*</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2" date="1489579200">- Fix a few coverity warnings
- package is dual-licensed GPL v2 or v3
- don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.1" date="1506427200">- Fix CVE-2017-14491
- Fix CVE-2017-14492
- Fix CVE-2017-14493
- Fix CVE-2017-14494
- Fix CVE-2017-14496
- Fix CVE-2017-14495
- extra fixes</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-2.2" date="1506513600">- Small correction of CVE-2017-14491</changelog>
</package>
<package pkgid="65f98bbfdd7e915c24c8eef2e28fba72f71083f485f0f1d713c4356bd3b0a2b9" name="docker-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="55.gitc4618fb.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.12.6-46.git1680dd8" date="1500465600">- rebased runc to 79c3939053c870fbb4de5484d98640d5ba028ef4, #1471803</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-47.git0fdc778" date="1500465601">- Resolves: #1471218
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 4f960ae</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-48.git0fdc778" date="1500552000">- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 79c3939
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-49.git0fdc778" date="1500984000">- changed permissions of /var/lib/docker and /etc/sysconfig/docker-storage, #1473785</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-50.git0fdc778" date="1501675200">- Resolves: #1428142, #1454371, #1454420, #1456184, #1470261, #1430905
- Resolves: #1446526, #1450221, #1451474, #1459268, #1461024, #1461071
- Resolves: #1464188, #1466242, #1464933, #1470640
- built docker @projectatomic/docker-1.12.6 commit 0fdc778
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-51.gitc4618fb" date="1502193600">- Resolves: #1472974
- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 8377044</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
</package>
<package pkgid="f25df2d08d95094f03334f7d528acf6ff681215603670695cb2a85da15007b4d" name="docker-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="61.git85d7426.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-52.gitc4618fb" date="1502798400">- built docker @projectatomic/docker-1.12.6 commit c4618fb
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 299e781</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-53.gitc4618fb" date="1503403200">- Resolves: #1484146
- need container-selinux &gt;= 2:2.21-2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-54.gitc4618fb" date="1503403201">- built oci-umount commit 8377044
- ensure diff between 1.12.6-51 and latest is only container-selinux NVR</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-55.gitc4618fb" date="1503576000">- Resolves: #1477787
- built oci-umount commit 6f0317a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-56.git638a809" date="1505736000">- built docker @projectatomic/docker-1.12.6 commit 638a809
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d
- built oci-umount commit 21c84aa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-57.git85d7426" date="1505908800">- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit 31a9f6e
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-58.git85d7426" date="1505995200">- Resolves: #1455071
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
</package>
<package pkgid="a776a3c727b5cd398e0f9ddfcb9c471774576978712ebd023a602f1301a4ecc8" name="docker-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="68.gitec8512b.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-59.git85d7426" date="1506081600">- reverted sources, the same file name should not have a different hash</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-60.git85d7426" date="1506427200">- Resolves: #1475768
- built docker @projectatomic/docker-1.12.6 commit 85d7426
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-61.git85d7426" date="1506427201">- reverted sources, the same file name should not have a different name</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
</package>
<package pkgid="7bb3eecd195dd54fc4a03e8462b037467999950d4c08bf25e0c13b90e5a79fb8" name="docker-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.12.6" rel="71.git3e8e77d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-62.git85d7426" date="1508414400">- rhel subscription secrets info moved to skopeo-containers
- require skopeo-containers &gt;= 0.1.24-3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-63.git6f58874" date="1509624000">- built docker @projectatomic/docker-1.12.6 commit 6f58874
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-64.git61aa37c" date="1509710400">- Resolves: #1498553
- built docker @projectatomic/docker-1.12.6 commit 61aa37c
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-65.git61aa37c" date="1510056000">- adjust sources file</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-66.gitd6f7b83" date="1510228800">- built docker @projectatomic/docker-1.12.6 commit d6f7b83
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-67.gitec8512b" date="1510228801">- built docker @projectatomic/docker-1.12.6 commit ec8512b
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.12.6 commit c5d3116
- built docker-containerd @projectatomic/docker-1.12.6 commit fa8fb3d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-68.gitec8512b" date="1510833600">- revert some docker.sysconfig deletions wrongly done in commit 3b003db</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-69.gitec8512b" date="1511352000">- use oci-register-machine &gt;= 1:0-3.14</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.12.6-70.gitec8512b" date="1513080000">- Resolves: #1524634 - start daemon after registries.service</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
</package>
<package pkgid="e9f824ef903ee9afe55431af96706c92821adec022bf2b1c5de3a8c47fc754eb" name="docker-debuginfo" arch="x86_64">
  <version epoch="2" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.12.6-71.git3e8e77d" date="1513166400">- rebased to 3e8e77dcb88db0530c839b249bea7d75f9cd01d7
- https://bugzilla.redhat.com/show_bug.cgi?id=1518519</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-1.gitddee18e" date="1516795200">- built docker @projectatomic/docker-1.13.1-rhel commit ddee18e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 5ab4ab8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-45.gitec9911e" date="1517486401">- c-s-s &gt;= 0.7.0-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-46.gitec9911e" date="1517832000">- Resolves: #1542112 - depend on oci-register-machine (disabled in config file)
- revert removal of oci-register-machine done in 2:1.13.1-1</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-47.gitec9911e" date="1517832001">- oci-register-machine &gt;= 1:0-5.13 (RE: #1542112)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-48.gitec9911e" date="1517832002">- Resolves: #1536726 - bump skopeo-containers dependency</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-52.gitce62987" date="1518436800">- Resolves: #1534827, #1543575
- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:1.13.1-53.git774336d" date="1519128000">- Resolves: #1540540
- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-novolume-plugin commit 385ec70
- built rhel-push-plugin commit af9107b
- built docker-lvm-plugin commit 8647404
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="72ef6b31990a422f25640103fdeae18a1fc004d57d977178ca121dbbadee62a9" name="docker-latest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="26.git1faa135.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-17.1.git19ea2d3" date="1497355200">- disable s390x due to indefinite brew wait times</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-18.1.git19ea2d3" date="1497441600">- enable all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-19.1.git19ea2d3" date="1497441601">- correct typo in unitfile</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.13.1-20.1.git19ea2d3" date="1499860800">- /etc/docker/certs.d/registry.access.redhat.com/redhat-ca.crt symlink added, #1428142</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-21.1.gitcd75c68" date="1500552000">- Resolves: #1473333
- built docker @projectatomic/docker-1.13.1-rhel commit cd75c68
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 79db05f
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit f81e09a
- Requires: docker &gt;= 1.12.6-48</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-22.git28ae36d" date="1501675200">- Resolves: #1475950
- Requires: docker &gt;= 2:1.12.6-50
- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit e85aeed</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-23.git28ae36d" date="1502193600">- built docker @projectatomic/docker-1.13.1-rhel commit 28ae36d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit b59a6bb
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 4892d4d
- built libnetwork commit da27c78</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-24.git1faa135" date="1505995200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit c34e58a</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-25.git1faa135" date="1506427200">- built docker @projectatomic/docker-1.13.1-rhel commit 1faa135
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 0f08d31</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-26.git1faa135" date="1506427201">- reverted sources, the same file shouldn't have a different hash</changelog>
</package>
<package pkgid="f4126323c28a8f8ac687b5749999454166511951da09ab264acdadd18c0f5205" name="docker-latest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="36.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-27.gita87d43a" date="1510056000">- built docker @projectatomic/docker-1.13.1-rhel commit a87d43a
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 6bbcd1b</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056001">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
</package>
<package pkgid="8ee6751af3d44c259bb96fc53a9521e2907a642dd90c02fcc57cfeb62ea7f650" name="docker-latest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="37.git9a813fa.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-28.gita87d43a" date="1510056000">- adjust sources</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-29.gitf4b0767" date="1510228800">- built docker @projectatomic/docker-1.13.1-rhel commit f4b0767
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-30.gitcd75a45" date="1510228801">- built docker @projectatomic/docker-1.13.1-rhel commit cd75a45
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 771c53e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-31.git9a813fa" date="1510833600">- Resolves: #1510170
- built docker @projectatomic/docker-1.13.1-rhel commit 9a813fa
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 89a5d2c
- built docker-init commit 0effd37
- built libnetwork commit 460ac8f</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-32.git9a813fa" date="1510833601">- do not set DOCKER_CERT_PATH if already set
- DOCKER_CERT_PATH in /etc/sysconfig/docker-latest should be /etc/docker-latest
and not /etc/docker
- document in docker-latest.sysconfig where some options have moved</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-33.git9a813fa" date="1511352000">- use docker-common &gt;= 2:1.12.6-69</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-34.git9a813fa" date="1511352001">- correct previous bogus date</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-35.git9a813fa" date="1511784000">- Resolves: #1517985 - use registries.conf from atomic-registries
- use docker-common &gt;= 2:1.12.6-68</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784001">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
</package>
<package pkgid="9bdb7e2d6583f133ab4b20621569cccdd837ec0728906bf4ee40f28ba3341f4f" name="docker-latest-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="53.git774336d.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-36.git9a813fa" date="1511784000">- fix unitfile RE: #1517985</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-37.git9a813fa" date="1513080000">- Resolves: #1524633 - start daemon after registries.service</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-43.gitec9911e" date="1517313600">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-44.gitec9911e" date="1517486400">- built docker @projectatomic/docker-1.13.1-rhel commit ec9911e
- built docker-runc @projectatomic/docker-1.13.1-rhel commit 518736e
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 20dd462</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-45.gitec9911e" date="1517486401">- sync release tag with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-46.gitec9911e" date="1517832000">- Require docker-common &gt;= 2:1.13.1-46 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-47.gitec9911e" date="1517832001">- Require docker-common &gt;= 2:1.13.1-47 RE: #1542112</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-48.gitec9911e" date="1517832002">- keep in sync with docker</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-52.gitce62987" date="1518436800">- built docker @projectatomic/docker-1.13.1-rhel commit ce62987
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 0effd37
- built libnetwork commit 1ba8194</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.13.1-53.git774336d" date="1519128000">- built docker @projectatomic/docker-1.13.1-rhel commit 774336d
- built docker-runc @projectatomic/docker-1.13.1-rhel commit e9c345b
- built docker-containerd @projectatomic/docker-1.13.1-rhel commit 296f1f8
- built docker-init commit 5b117de
- built libnetwork commit 14db3c4</changelog>
</package>
<package pkgid="732216b6c59e148fff2212575932b06c2b1a7e51fe50de82945dd93254aed796" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="16.11.2" rel="4.el7"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 2.2.0-3" date="1458129600">- Disable librte_vhost NUMA support for now, it causes segfaults</changelog>
  <changelog author="Flavio Leitner &lt;fbl@redhat.com&gt; - 16.04-4" date="1469102400">- Updated to DPDK 16.04</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 16.07-1" date="1475668800">- Update to DPDK 16.07 (#1383195)
- Disable unstable bnx2x driver (#1330589)
- Enable librte_vhost NUMA support again (#1279525)
- Enable librte_cryptodev, its no longer considered experimental
- Change example prefix to dpdk- for consistency with other utilities
- Update driverctl to 0.89</changelog>
  <changelog author="Kevin Traynor &lt;ktraynor@redhat.com&gt; - 16.11-2" date="1481198400">- Update to DPDK 16.11 (#1335865)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-3" date="1486036800">- Make driverctl a different package</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11-4" date="1490184000">- Avoid infinite loop while linking with libdpdk.so (#1434907)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 16.11.2-1" date="1496923200">- Import from fdProd
- Update to 16.11.2 (#1459333)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-2" date="1496923201">- Enable aarch64, ppc64le (#1428587)</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-3" date="1497009600">- Enable i40e driver in PowerPC along with its altivec intrinsic support
- Add PCI probing support for vfio-pci devices in Power8</changelog>
  <changelog author="John W. Linville &lt;linville@redhat.com&gt; - 16.11.2-4" date="1498219200">- Backport "eal/ppc: fix mmap for memory initialization"</changelog>
</package>
<package pkgid="6379fd15e3da94b27fbea5bacc3cde4fb5b42787b5ea733436586b93fb1eb776" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="033" rel="502.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-463" date="1475668800">- network: do not check "firmware boot selected flag"
Resolves: rhbz#1380581</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-487" date="1489147200">- add upstream tests
- dracut.sh: fail hard, if we find modules and modules.dep is missing
Resolves: rhbz#1298656
- add dracut.pc pkg-config file
Resolves: rhbz#1397853
- systemd/dracut-cmdline.sh: unset "UNSET" $root
Releated: rhbz#1365667
- dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
- fips/module-setup.sh: make tcrypt non-optional</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-492" date="1489665600">- rd.memdebug=4
Resolves: rhbz#1376661</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-495" date="1491480000">- ifup: don't ifup team master indefinitely
Resolves: rhbz#1416958
- write-ifcfg: do't write MTU twice for regular eth devices
Resolves: rhbz#1366163
- network/ifup: write override file before dhcp_do
Resolves: rhbz#1415004</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-496" date="1492689600">- 95ssh-client: attempt to copy UserKnownHostsFile to kdump's initramfs
Resolves: rhbz#1360131</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-499" date="1496836800">- module-setup.sh: Add ARM specific driver to initramfs image
Resolves: #1459277
- Revert "systemd/dracut-initqueue.sh: don't go into emergency"
Resolves: #1396865
- udev-rules: pull in 40-redhat-cpu-hotplug.rules
Resolves: #1460707</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-500" date="1497355200">- fips: add cmac kernel module
Resolves: #1460865</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-501" date="1497528000">-  95iscsi: run iscsistart with DefaultDependencies=no
Resolves: #1461234</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502" date="1498651200">- 01fips: add authenec module
Resolves: #1465946</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-502.1" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
</package>
<package pkgid="2cb61665fb616381b8947e409f6026a5bd145f9cd576621e4d0eb3edb8c0cad8" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="24.3" rel="20.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:24.3-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1:24.3-12" date="1414065600">- Disable opmitization for arm architecture
  resolves: #1155952</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-13" date="1432209600">- Resolves: #1077836 emacs counts used memory incorrectly</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-14" date="1436961600">- texinfo not reading all of /usr/share/info content
- Resolves: #1192538</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490452)</changelog>
</package>
<package pkgid="7c9e34d264fe83268a7ac9035e52f0fe68649f9df1f2b937cc11064758586647" name="etcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.11" rel="1.el7"/>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.10-1" date="1511265600">- Update to 3.2.10
  resolves: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.11-1" date="1512561600">- Update to 3.2.11
  related: #1514612</changelog>
</package>
<package pkgid="7eb050deb7021c02fc6315fe4d4a317fff5387eb7dcced59d3bb86efa146e7fa" name="etcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.15" rel="1.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.10-1" date="1511265600">- Update to 3.2.10
  resolves: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.11-1" date="1512561600">- Update to 3.2.11
  related: #1514612</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.15-1" date="1517227200">- Update to 3.2.15
  resolves: #1539670
  resolves: #1378706</changelog>
</package>
<package pkgid="e95e6a821e69e953b245ada8b22b6c2223e28741d215b0c187fdc7bb55f71454" name="etcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.5" rel="1.el7"/>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-1.1" date="1487246400">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.0-2" date="1487678400">- Apply "add --keep-cluster-id and --node-id to 'etcdctl backup'"
  from extras-rhel-7.2 branch
  resolves: #1350875</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-2.1" date="1488196800">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.3-1" date="1490097600">- Update to 3.1.3
  resolves: #1434364</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.3-2" date="1491307200">- Circumvent runtime check of officially supported architectures
  resolves: #1434973</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
</package>
<package pkgid="2d7d55f94fecfe91769607f04f5fe2efbe83493160506801ca6ee551e6eea8d8" name="etcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.7" rel="1.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.0-2" date="1487678400">- Apply "add --keep-cluster-id and --node-id to 'etcdctl backup'"
  from extras-rhel-7.2 branch
  resolves: #1350875</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 3.1.0-2.1" date="1488196800">- Rebuild rebase on all architectures</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.3-1" date="1490097600">- Update to 3.1.3
  resolves: #1434364</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 3.1.3-2" date="1491307200">- Circumvent runtime check of officially supported architectures
  resolves: #1434973</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
</package>
<package pkgid="ff236847f1204d8898d8cb8d40a7e785d89e95e231e1ad792c52ac0664a20be2" name="etcd-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.9" rel="3.el7"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.7-1" date="1493726400">- Update to 3.1.7
  resolves: #1447235</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.8-1" date="1496750400">- Update to 3.1.8
  resolves: #1459122</changelog>
  <changelog author="Scott Dodson &lt;sdodson@redhat.com&gt; - 3.1.9-1" date="1497009600">- Update to 3.1.9
  resolves: #1458941</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.1.9-2" date="1497268800">- Build for secondary architectures as well</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.5-1" date="1502193600">- Update to 3.2.5
  resolves: #1479371</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-1" date="1505822400">- Update to 3.2.7
  resolves: #1493165</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.7-2" date="1506686400">- Rebuild with correct hardening flags
  resolves: #1420783</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-1" date="1510056000">- Update to 3.2.9
  resolves: #1510480
- Generate etcd and etcdctl man-pages
  resolves: #1444336</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-2" date="1511179200">- Fix Synopsis of etcdctl3 man pages
  related: #1510480</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.9-3" date="1511179201">- Bump man-pages tarball
  related: #1510480</changelog>
</package>
<package pkgid="ced09288862ec40f7b092a74c3d7bf9acd933d4ea71726c4f5cdd8ba5d37ebe3" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.1"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-57" date="1490184000">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986
- Add consistency of parameters between STDIN and command-line
  Resolves: rhbz#1403028</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-58" date="1490270400">- CI: dont test paths in metadata
  Resolves: rhbz#1377972</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
</package>
<package pkgid="80dec61cc9e123f272a74e59cb2c89aaec2d816b8d45299c17429ffcf05a5a85" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-60" date="1491220800">- fence_compute: fix project_id changed to project_name in Nova API
  Resolves: rhbz#1426693</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
</package>
<package pkgid="c84d7a48d6e3243e1773ef0487d463de65cf2de97c423ea2ea2c61e762ab0ea2" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="66.el7_4.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-61" date="1493899200">- fence_ipmilan: add target (ipmilan -t &lt;target&gt;) support
  Resolves: rhbz#1377389</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-62" date="1495022400">- Set SELinux booleans required for fence agent integration with cluster
  Resolves: rhbz#1427986</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-63" date="1496145600">- Add dependencies on policycoreutils
  Resolves: rhbz#1427986</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-64" date="1496836800">- fence_vmware_soap: fix for self-signed certificates
  Resolves: rhbz#1459199</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-65" date="1497528000">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.11-66" date="1497614400">- Set SELinux booleans even when SELinux is disabled
  Resolves: rhbz#1457887</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.1" date="1502366400">- fence_compute/fence_scsi: fix issue with some parameters
  Resolves: rhbz#1479851</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.2" date="1506686400">- fence_compute/fence_evacuate: changes to support Instance HA on OSP12
  Resolves: rhbz#1497072</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.3" date="1506686401">- fence_compute/fence_scsi: fix issue with some parameters
  (for ABI compatibility)
  Resolves: rhbz#1497241</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-66.4" date="1516190400">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1535415</changelog>
</package>
<package pkgid="8bcd7b08e1bceae32c712ae7b002c05eca84b89ef2f8d387e34b5eb386a2dfd0" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.3.0" rel="2.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
</package>
<package pkgid="0b2d145c38bda1147a0b02558461c629e375a66eea30fa67759e85e154ce2fbf" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="2.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
</package>
<package pkgid="0ffe3d1b7f2045768b83759f3e8cec4290974616758c578004f7aada73efe268" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="68af199e2f6a82c1ae38167bd53a58563bb4ab299954014491522f44ebbc8f77" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="d0b89aae98ffcda0faedbd0bf085b41ea913a255e3177f155215fe2abc796ce4" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="d6cd640c3f89b403a7b97a64a4174f8e4932fbc57c5954f34991376e143c33a0" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="87cfec2c294362c1825d41a543966a7724719800ea1673ac5fbeeb2446afeb26" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="f8135830082b8ae9fa0c680802c45267c0b9d70a1193e8a40c31543bee6a8907" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.1" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="2eaeb1f6102a4c3ab1de30573f076856459c8f308ae939c0ba48f4fba240ba2e" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="74e3cd14f27842645562699662c204b2eface5d0393a7d52c07a9408bbc1c3b4" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="9dee825a2c32a8a3bdafa553b6607b5241ce246761fa89d072747c795ce17cbd" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="a196401dbc124416aef87af9d55fc2d067f556e902c8968d79018da5d561a3e6" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-6" date="1490184000">- Removing patch required for older NSS from RHEL 7.3
- Added patch for rhbz#1414564</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="91226ee940f70facf08c6378c99794a4274a53b9cf97da41546940d8df66f573" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="b6f2ba3800796fbdc4e7a6316cc34c0558096c248a18af140da474e7cc950e27" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-7" date="1495627200">- Added fix for accept language (rhbz#1454322)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.2-1" date="1495627201">- Update to 52.1.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="7d0aa4d63ebd583369c56552502294edea183308fc3173051c88fcd80e9ec09c" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="7b7858965c24e26b2fc028f29463f375e4192797f02876816fca23caed4fe9fd" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.el7_4"/>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-2" date="1487332800">- Added pkgconfig(e2p) build dependency
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.3-3" date="1487332801">- ExcludeArch 32bit ppc which doesn't have libseccomp
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.3-4" date="1487764800">- Remove ExcludeArch ppc now that we have libseccomp there
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.4-1" date="1489147200">- Update to 0.8.4
- Resolves: #1391018</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.4-2" date="1489147201">- Sync bzip2 dependency with Fedora package
- Make the libs subpackage depend on the base package for libostree
- Fix multilib issues with XML-based documentation</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.5-1" date="1491220800">- Update to 0.8.5
- Resolves: #1391018</changelog>
  <changelog author="Alexander Larsson &lt;alexl@redhat.com&gt; - 0.8.5-2" date="1491307200">- Add libostree use-after-free patch
- Resolves: #1391018</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.8.7-1" date="1497960000">- Update to 0.8.7
- Resolves: #1391018</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 0.8.7-2" date="1501588800">- Fix libostree bundling:
  Ensure we do not Provide or Require libostree.
  Move the shared library into flatpak-libs so flatpak always
  depends on it.
  Keep the shared library filename as libostree, but put it
  under a private directory.  Renaming the file on disk did not
  really do much since the dynamic linker and RPM work from the
  soname.
  Resolves: #1476905
- Tweak build to work both with and without BZ#1392354</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 0.8.7-3" date="1510315200">- Fix crasher in xdg-desktop-portal
- Tweak spec file so it still builds even though we need to
  autoreconf.</changelog>
</package>
<package pkgid="7db8e0198578c52673471c651f6cb5abb206749140a45f2a885c21ec9755eb99" name="gcab-debuginfo" arch="i686">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="b3e6f372ab35d222afd26fcc2539357c0845a3b1688b14dacd9a020fdae21e48" name="gcab-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="4.el7_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-1" date="1426593600">- Update to upstream release v0.6</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6-2" date="1427112000">- Pull in the base library package when installing -devel</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.6-4" date="1438257600">- Fix wrong file modification date when creating cab.</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 0.6-5" date="1448971200">- Bump NVR and rebuild due to a mistakenly deleted build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6-6" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.7-1" date="1457524800">- 0.7 release update.</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-2" date="1488456000">- Fix some bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-3" date="1488801600">- Fix some more bugs spotted by coverity and RPMDiff.
- Resolves: #1388476</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.7-4" date="1518609600">- Fixes the security issue known as CVE-2018-5345
- Resolves: #1533174</changelog>
</package>
<package pkgid="9e8a66297e619ad3ca8a7d8aa114c37b145999b24a969e722cd5d0418e00a057" name="gcc-base-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="12980929eebf308cce78c0249e6dc185122859ca8439098eb69dc54313f3e6af" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="493fbfac96305443a55104ecbb7466e4db5219e61b93a73b2245d1bc339bab94" name="gcc-base-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="dcc920350ad61ce8ff7d07f50c15075a14167eb5f7e01b3cadcb940b15e12b40" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="507ff255440545bd1656775e9b9df69af003ad82aed05581aba0402a667df4f8" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="cb1dabf7d6214762634583f4ce3bfca2eb07cab87c1a11569da4c44f71c43621" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.1"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-8" date="1465992000">- fix a bug in C++ ref-to-ptr conversion (#1344807)
- fix combiner handling of jumps on aarch64 (#1344672,
  PR rtl-optimization/52714)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
</package>
<package pkgid="580bcbeacd065a32629327bd07937ece586390f81cc9174f4e6f45bb1b4caebc" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="780bbe7397f19e3c62bdad5462e26b85ddc9903fadf034889aff5355e38c33da" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="16.el7_4.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-9" date="1468584000">- backport OpenMP 4.5 support to libgomp (library only; #1357060,
  PRs libgomp/68579, libgomp/64625)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-10" date="1470830400">- include vecintrin.h intrinsic header on s390 (#1182152)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-11" date="1472644800">- on aarch64 emit scheduling barriers before stack deallocation in
  function epilogues (#1362635, PR target/63293)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-12" date="1488888000">- fix up std::rethrow_exception (#1375711, PR libstdc++/62258)
- use _Unwind_GetIPInfo in __gcc_personality_v0 (#1387402, PR libgcc/78064)
- fix vec_vsx_ld/st on ppc64le (#1389801, PR target/72863, PR target/78084)
- fix ICE in gfc_compare_derived_types (#1369183)
- fix EH from C++ thunks (#1427412, PR ipa/68184)
- on ppc64{,le} emit nop after recursive call if the current function
  is replaceable (#1420723, PR target/79439)
- on aarch64 with -frounding-math use fnmul only with -(a*b) and not
  with (-a)*b (#1418446, PR target/66731)
- constrain std::valarray functions and operators (#1416214,
  PR libstdc++/69116)
- fix gimplification of aggregate assignments when lhs is used
  (#1396298, PR middle-end/72747, PR c/78408)
- fix aarch64 TLS with -mcmodel=large (#1389276, PR target/78796)
- fix aarch64 reloading of floating point constants into general purpose
  registers (#1349067, PR target/70549)
- fix DW_AT_decl_line on DW_TAG_enumeration_type for C enumeration
  definitions following forward declarations (#1423460, PR c/79969)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.8.5-13" date="1489147200">- add -mstack-protector-guard={tls,global}, -mstack-protector-guard-reg=
  and -mstack-protector-guard-offset= options on ppc* (#1415952,
  PR target/78875)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-14" date="1489406400">- promote reloads of a PLUS to RELOAD_OTHER (#1402585)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-15" date="1496232000">- properly apply the PR70549 patch (#1349067)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16" date="1496318400">- disable emitting profiling in functions marked with a special
  attribute (#1457969)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-16.1" date="1505390400">- fix .toc alignment (#1487434)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-16.2" date="1516795200">- retpoline support for spectre mitigation (#1538487)</changelog>
</package>
<package pkgid="b96fd7829fee635b52cc8ad1866570d4c2fdf1bf624dc8cd7cc3db7496baefbe" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.6.1" rel="100.el7_4.1"/>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-92.el7" date="1464609600">- Import bare DW_TAG_lexical_block (RH BZ 1325396).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-93.el7" date="1467028800">- Fix 'info type-printers' Python error (Clem Dickey, RH BZ 1350436).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-94.el7" date="1470225600">- [aarch64] Fix ARMv8.1/v8.2 for hw watchpoint and breakpoint
  (Andrew Pinski, RH BZ 1363635).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-95.el7" date="1488801600">- Fix RHEL GDB build with devtoolset-*-build installed (RH BZ 1422193).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-96.el7" date="1488974400">- [testsuite] Fix ppc64 run of dw2-lexical-block-bare.exp (RH BZ 1357079).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-97.el7" date="1489147200">- [testsuite] [ppc*,s390*] Do not FAIL rhbz1261564-aarch64-watchpoint.exp
  (RH BZ 1352563).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-98.el7" date="1489924800">- [ppc*] IBM Power9 and __float128 backport (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-99.el7" date="1492776000">- [ppc*] Fix gdb.arch/powerpc-power7.exp testcase regression (RH BZ 1440044).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7" date="1497355200">- [ppc*] IBM Power9 backport extension (RH BZ 1320945).</changelog>
  <changelog author="Jan Kratochvil &lt;jan.kratochvil@redhat.com&gt; - 7.6.1-100.el7_4.1" date="1512993600">- Fix gcore for memory regions with VM_DONTDUMP (RH BZ 1524312, Sergio Lopez).</changelog>
</package>
<package pkgid="353957d8b9c5a05b88a35a74c55d91095069aa8d82c86b76a612801d86660ece" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="8ea710ac266af839067ef76d58af8092cb4e79ce24b08383d77878e8738d72a3" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.22.3" rel="13.el7_4"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-4" date="1489665600">- Drop reference to wayland in config file
- use autosetup to simplify spec maintenance
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-5" date="1489665601">- Attempt to fix po file installation
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-6" date="1490961600">- Fix indirect XDMCP
  Resolves: #1273156</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-7" date="1491220800">- Fix user switching
  Related: #1386862</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.22.3-8" date="1491393600">- Reap transient login screens when they are no longer needed
- Jump to login screen if we end up on a blank VT
  Resolves: #1301028</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-9" date="1493899200">- Make sure reauthentication is run within the user
  session.
  Resolves:#1448209</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-10" date="1494590400">- Add patches to try to maintain some semblance of compatibility
  when live upgrading between 7.3 and 7.4
  Related: #1448786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-11" date="1496145600">- Add japanese translation
  Resolves: #1449632</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-12" date="1499860800">- Ensure X server is dead after logout
  Resolves: #1469755</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.3-13" date="1512388800">- fix reauth crash
  Resolves: #1519250</changelog>
</package>
<package pkgid="25969501db41ece9c60a9bed50665a68374cd5b6c89427dc90e2d33043fb0a7a" name="ghostscript-debuginfo" arch="i686">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="da93dbc56fc63d16dbe5d625f58cfdfad308a2ae812d3f3c663329b7a139c09b" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.07" rel="28.el7_4.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-21" date="1478174400">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7978 (bug #1382300)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-22" date="1484049600">- Fix of SIGSEGV in cid_font_data_param when using ps2pdf (bug #1390847)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-23" date="1487160000">- Fix for regression caused by previous CVE fixes (bug #1411725)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-24" date="1490097600">- Fix infinite 'for' loop in gdevp14.c file (bug #1424752)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-25" date="1491480000">- Added security fix for CVE-2017-7207 (bug #1434353)
- Added explicit requirement for lcms2 version we are build with (bug #1436273)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-26" date="1491912000">- Updated requirements for lcms2 to avoid possible issues in the future</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-27" date="1493812800">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.1" date="1500984000">- Fix rare Segmentation fault when converting PDF to PNG (bug #1473337)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.07-28.el7_4.2" date="1503403200">- Raise the default VMThreshold from 1Mb to 8Mb (bug #1479852)</changelog>
</package>
<package pkgid="e708980e1dd2be47ea0c264f1d27191cecf1a65a4990ce19130a976ba964fbdb" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="12.el7_4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.8.3.1-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b111fc900a0a2b0aee6501254b33d00854d6d91742a3fd9947c9ecf784550ce7" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="9aaa890945b4a2c0aa49f93a55bab74c9485e41c2686dd464e59838cef0dbaad" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="4e28a18b300ff0190747ee175e24192aae75b1054b2730ffe648b00d95d29607" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="538ad52bfa8fc938346bb5a41125268ec41e604698aec8f03a618e1fd2e8ec81" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="196.el7_4.2"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-189" date="1489579200">- Update dynamic loader trampoline for Intel SSE, AVX, and AVX512 usage (#1421155)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-190" date="1490702400">- Add transparent lock elision for default POSIX mutexes on
  Intel hardware with support for Intel TSX (#841653).
- Update dynamic loader trampoline for Intel Skylake server (#1421155).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-191" date="1490702401">- Add transparent lock elision for default POSIX mutexes on
  IBM POWER hardware with support for IBM POWER HTM (#731835).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-192" date="1490788800">- Exclude lock elision support for older Intel hardware with
  Intel TSX that has hardware errata (#841653).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-193" date="1492516800">- Inhibit FMA while compiling sqrt, pow (#1413638)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-194" date="1493208000">- Use a built-in list of system call names (#1439165)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-195" date="1497009600">- Rounding issues on POWER (#1457177)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-196" date="1497614400">- Avoid large allocas in the dynamic linker (#1452721)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.1" date="1510660800">- x86-64: Use XSAVE/XSAVEC in the ld.so trampoline (#1513070)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-196.2" date="1511352000">- Update HWCAP bits for IBM POWER9 DD2.1 (#1515114)
- Improve memcpy performance for POWER9 DD2.1 (#1516402)</changelog>
</package>
<package pkgid="32915e25b80ae5168ad6a16b4bcaeb8882a80b12c900b52249ad6389fb4b58fb" name="gomtree-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="1.1.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
</package>
<package pkgid="57a9cd0647ab8f3d802dde5c32cdf4a94c761da3ac1c19645c29179950aba45a" name="gomtree-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="2.1.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.4.2-2.1" date="1512993600">- rebase to 0.4.2 - de69569d25a8611cfac834ac4801194bc352b448</changelog>
</package>
<package pkgid="21ed52128e38812a5d1529037620970d2aa1a9b9c121556ed61efaa004d9145a" name="gomtree-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="0.2.git16da0f8.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.1.git8c6b32c" date="1475150400">- First package for Fedora</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 0-0.2.git8c6b32c" date="1475496000">- Resolves: #1380420 - import into Fedora
- fix binary build step</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0-0.3.git8c6b32c" date="1476964800">- add debuginfo package (rpmdiff complains about unstripped binary)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com - 0.3.0-1" date="1481716800">- Resolves: #1404402 - rebase to v0.3.0
- built commit 58660bb</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-1" date="1485172800">- Resolves: #1415321 - rebase to v0.3.1</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.3.1-2" date="1490097600">- golang arches: https://bugzilla.redhat.com/show_bug.cgi?id=1418480</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.3.1-2.1" date="1491220800">- build for all available arches on 7.4</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 0.4.0-1.1" date="1499860800">- rebase to 0.4.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.4.2-2.1" date="1512993600">- rebase to 0.4.2 - de69569d25a8611cfac834ac4801194bc352b448</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 0.5.0-0.2.git16da0f8" date="1517486400">- rebase to 16da0f86ee549d8949775bf3d555e7921a9caca9</changelog>
</package>
<package pkgid="d2f2b319045ae10e62738f1c9fb1670196c875dd2dc9e4355230672ed2eb8379" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="90a630d84939d3fab6c0ef5f71ec0c1e2c7957ada13554ed49399917adca39cf" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.65.el7_4.2"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.58" date="1492603200">- Add Aarch64 FDT #address-cells and #size-cells support
  Resolves: rhbz#1436745
- Fix ppc64 "grub2.chrp" to be "grub.chrp"
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.59" date="1492603201">- Fix ppc64 "grub2.chrp" to be "grub.chrp" harder
  Resolves: rhbz#1442970</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.60" date="1492689600">- Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
  exists.  This is also why the bug we fixed in 0.59 showed up at all.
  Resolves: rhbz#1443809
  Resolves: rhbz#1442970
- Fix a regexp problem where rpm spec parser un-escapes things that
  don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
  to fail.
  Related: rhbz#1443809</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.61" date="1495627200">- Fix some minor ia32 booting bugs
  Related: rhbz#1310763
  Related: rhbz#1411748
  Related: rhbz#1300009
- Add support for non-Ethernet network cards
  Related: rhbz#1232432
- Add support for http booting
  Resolves: rhbz#1232432
- Fix efi module subpackage obsoletes/provides
  Resolves: rhbz#1447723
- Make ppc modules subpackages use different directories on the filesystem.
  Resolves: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.62" date="1496145600">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="pjones &lt;pjones@redhat.com&gt; - 2.02-0.63" date="1496145601">- Fix grub2-mkimage on ppc* to *also* deal with pkglibdir changing.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.64" date="1496232000">- Revert pkglibdir usage; we have to coordinate this with Lorax.
  Related: rhbz#1455243</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65" date="1507032000">- Fix spurious : at the end of the mac address netboot paths.
  Resolves: rhbz#1497323</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.1" date="1507291200">- More precise requires and obsoletes on the -tools* subpackages to avoid
  issues with mixing and matching repos the subpackages are split between.
  Resolves: rhbz#1499669</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.65.el7_4.2" date="1507550400">- Fix an incorrect man page exclusion on x86_64.
  Related: rhbz#1499669</changelog>
</package>
<package pkgid="7e5f52229898a86dd25aa7dc86414b46153e412da8ce9b996cee39e79620be0f" name="gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="099b0c988f69fa38285db4517f7c67a6c13b611d78389a1c6a8a2e7ecc597e61" name="gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.10" rel="5.el7_4"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-1" date="1486987200">- Update to 3.22.8
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.8-2" date="1487073600">- Build with xrandr 1.5.0
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.9-1" date="1488283200">- Update to 3.22.9
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-1" date="1489492800">- Update to 3.22.10
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-2" date="1492689600">- Try harder to remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.10-3" date="1492689601">- Really remove all libtool .la files
- Resolves: #1386980</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.10-5" date="1513339200">- Fix touch emulated pointer motion event delivery with spice-gtk
Resolves: #1524317</changelog>
</package>
<package pkgid="f4c3ddb8b2fff64ceb3f03b9fa08f9cdc3ef5ff302f2b6b4caa21cd9dd168073" name="http-parser-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="21743b5d70d981b59584ddb6cd3259dbf50d221e93cb01cd7ab299426aa2058e" name="http-parser-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="5.el7_4"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-1" date="1485950400">- Import spec file and patches from latest fc25 package
  Resolves: rhbz#1393819</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 2.7.1-5" date="1502366400">- Bump http-parser release number to avoid people pulling EPEL package instead
  of RHEL package
  Resolves: rhbz#1480321</changelog>
</package>
<package pkgid="86b1addd0c48de91f2827c4556a38d911b9cf71e6c2a66ba663c03dc882b0a7f" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.2"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-59" date="1489406400">- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
  are broken during buffer resize</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="d954a572417c0dc7050360d12f94414d601a5d7bb1d61f32b83cc518dd829c23" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-60" date="1489492800">- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
</package>
<package pkgid="11d160a16c875dc87448b1c8ec96561d3b9ec4aeb2427f5336c85f386f94b88b" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="67.el7_4.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-61" date="1489579200">- Related: #1414258 - Crash during restart or at startup in mod_ssl,
  in certinfo_free() function registered by ssl_stapling_ex_init()</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-62" date="1489579201">- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
  patch to set worker secret passed to tomcat</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-63" date="1490184000">- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
  httpd: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-64" date="1492516800">- Resolves: #1442872 - apache user is not created during httpd installation
  when apache group already exist with GID other than 48</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-65" date="1493294400">- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-66" date="1494331200">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67" date="1494331201">- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
  directives</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.2" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.5" date="1505822400">- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
  unregistered HTTP method</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-67.6" date="1507032000">- Resolves: #1498020 - rotatelogs: creation of zombie processes when -p is used</changelog>
</package>
<package pkgid="9d2ae3be565095aa60b0f387531f28eee6c496b32956268486a4c2dc946f933e" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.49.39" rel="1.el7_4.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.31-1" date="1465819200">- ipv6: wait for all global IPv6 addresses to leave the "tentative" state
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
- ifup-aliases: inherit ARPCHECK from parent device
- rhel-dmesg: don't start in containers
- ifup-eth: fix typo in error message (#1038776)
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
- rwtab: /var/lib/nfs needs to copy the files
- functions: improve killing loops
- ipcalc: detect invalid mask
- ifup: set valid_lft and preferred_lft to forever for static ip
- service: use systemd mangle for given service
- ifup-post: check resolve.conf also with DNS2
- ifdown-post: remove resolv.conf only in specific cases
- spec: ghost /var/log/dmesg
- network-functions: is_available_wait should wait even in the case that is_available returns 2
- autorelabel: turn quota off before relabeling
- autorelabel: call dracut-initramfs-restore before forced reboot</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.32-1" date="1466683200">- ifup-eth: fix setting preferred_lft and valid_lft</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1.el7_4.1" date="1509710400">- ARUPDATE option introduced</changelog>
</package>
<package pkgid="20a3c22e8035e879a225250d8a36e95d7c073b71935b86463ff912d09bc6392f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.1.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-15.el7" date="1496836800">- Resolves: #1442233 IPA client commands fail when pointing to replica 
  - httpinstance: wait until the service entry is replicated
- Resolves: #1456769 ipaAnchorUUID index incorrectly configured and then
  not indexed
  - Fix index definition for ipaAnchorUUID
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Avoid possible endless recursion in RPC call
  - rpc: preparations for recursion fix
  - rpc: avoid possible recursion in create_connection
- Resolves: #1446087 services entries missing krbCanonicalName attribute.
  - Changing cert-find to do not use only primary key to search in LDAP.
- Resolves: #1452763 ipa certmaprule change not reflected in krb5kdc workers
  - ipa-kdb: reload certificate mapping rules periodically
- Resolves: #1455541 after upgrade login from web ui breaks
  - kdc.key should not be visible to all 
- Resolves: #1435606 Add pkinit_indicator option to KDC configuration
  - ipa-kdb: add pkinit authentication indicator in case of a successful
    certauth
- Resolves: #1455945 Enabling OCSP checks in mod_nss breaks certificate
  issuance when ipa-ca records are not resolvable
  - Turn off OCSP check
- Resolves: #1454483 rhel73 ipa ui - cannot del server - IPA Error 903 -
  server_del - TypeError: 'NoneType' object is not iterable
  - fix incorrect suffix handling in topology checks</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-16.el7" date="1496836801">- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces
  - Only warn when specified server IP addresses don't match intf
- Resolves: #1438016 gssapi errors after IPA server upgrade
  - Bump version of python-gssapi
- Resolves: #1457942 certauth: use canonical principal for lookups
  - ipa-kdb: use canonical principal in certauth plugin
- Resolves: #1459153 Do not send Max-Age in ipa_session cookie to avoid
  breaking older clients
  - Add code to be able to set default kinit lifetime
  - Revert setting sessionMaxAge for old clients</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
</package>
<package pkgid="32d5712f289d56750b890bc92f0f89a30e646a13e6517c3a50dc1a19f7287666" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="21.el7_4.2.2"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-17.el7" date="1497441600">- Resolve: #1455946 Provide a tooling automating the configuration 
  of Smart Card authentication on a FreeIPA master
  - server certinstall: update KDC master entry
  - pkinit manage: introduce ipa-pkinit-manage
  - server upgrade: do not enable PKINIT by default
  - Extend the advice printing code by some useful abstractions
  - Prepare advise plugin for smart card auth configuration
- Resolve: #1461053 allow to modify list of UPNs of a trusted forest
  - trust-mod: allow modifying list of UPNs of a trusted forest
  - WebUI: add support for changing trust UPN suffixes</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
</package>
<package pkgid="7fd9e79f968b98a47d513032355a1d6e5d2cde0edae5d72b305599a6b24d995f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="22.el7_4"/>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-18.el7" date="1497528000">- Resolves: #1449189 ipa-kra-install timeouts on replica
  - kra: promote: Get ticket before calling custodia</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-19.el7" date="1498046400">- Resolves: #1462112 ipaserver installation fails in FIPS mode: OpenSSL
  internal error, assertion failed: Digest MD4 forbidden in FIPS mode!
  - ipa-sam: replace encode_nt_key() with E_md4hash() 
  - ipa_pwd_extop: do not generate NT hashes in FIPS mode
- Resolves: #1377973 ipa-server-install fails when the provided or resolved
  IP address is not found on local interfaces 
  - Fix local IP address validation 
  - ipa-dns-install: remove check for local ip address
  - refactor CheckedIPAddress class
  - CheckedIPAddress: remove match_local param
  - Remove ip_netmask from option parser
  - replica install: add missing check for non-local IP address
  - Remove network and broadcast address warnings</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-20.el7" date="1498564800">- Resolves: #1452216 Replica installation grants HTTP principal
  access in WebUI
  - Make sure we check ccaches in all rpcserver paths</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7" date="1499860800">- Resolves: #1470125 Replica install fails to configure IPA-specific
  temporary files/directories
  - replica install: drop-in IPA specific config to tmpfiles.d
- Resolves: #1469978 bind package is not automatically updated during
  ipa-server upgrade process
  - Bumped Required version of bind-dyndb-ldap and bind package</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1" date="1501588800">- Resolves: #1473272 Provide a tooling automating the configuration
  of Smart Card authentication on a FreeIPA master
  - smart-card advises: configure systemwide NSS DB also on master
  - smart-card advises: add steps to store smart card signing CA cert
  - Allow to pass in multiple CA cert paths to the smart card advises
  - add a class that tracks the indentation in the generated advises
  - delegate the indentation handling in advises to dedicated class
  - advise: add an infrastructure for formatting Bash compound statements
  - delegate formatting of compound Bash statements to dedicated classes
  - Fix indentation of statements in Smart card advises
  - Use the compound statement formatting API for configuring PKINIT
  - smart card advises: use a wrapper around Bash `for` loops
  - smart card advise: use password when changing trust flags on HTTP cert
  - smart-card-advises: ensure that krb5-pkinit is installed on client
- Resolves: #1477046 Use CommonNameToSANDefault in default profile 
  (new installs only)
  - Add CommonNameToSANDefault to default cert profile
- Resolves: #1475664 NULL LDAP context in call to ldap_search_ext_s
  during search in cn=ad,cn=trusts,dc=example,dc=com
  - NULL LDAP context in call to ldap_search_ext_s during search</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.1" date="1502798400">- Resolves: #1477046 Use CommonNameToSANDefault in default profile
  (new installs only)
  - Restore old version of caIPAserviceCert for upgrade only</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.0-21.el7.1.2" date="1502884800">- Fixing issues reported by Errata tool</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2" date="1505822400">- Resolves: #1486794 - [ipa-replica-install] - 406 Client Error: Failed to
  validate message: Incorrect number of results (0) searching forpublic
  key for host
    - Always check peer has keys before connecting
- Resolves: #1489300 - Unable to set ca renewal master on replica
    - Fix ipa config-mod --ca-renewal-master
- Resolves: #1489815 - TypeError in renew_ca_cert prevents from swiching
  back to self-signed CA
    - Backport PR 988 to ipa-4-5 Fix Certificate renewal (with ext ca)
- Resolves: #1489817 - ipa-server-upgrade failes with "This entry already exists"
    - Backport PR 1008 to ipa-4-5 Fix ipa-server-upgrade: This entry already exists
- Resolves: #1490331 - FreeIPA/IdM installations which were upgraded from
  versions with 389 DS prior to 1.3.3.0 doesn't have whomai plugin enabled and
  thus startup of Web UI fails
    - Adds whoami DS plugin in case that plugin is missing
- Resolves: #1491545 - IPA WebUI does not work after upgrade from IPA 4.4 to 4.5
    - Fixing how sssd.conf is updated when promoting a client to replica
- Resolves: #1492616 - ipa-otptoken-import - XML file is missing PBKDF2
  parameters!
    - ipa-otptoken-import: Make PBKDF2 refer to the pkcs5 namespace
- Resolves: #1493153 - Updating from RHEL 7.3 fails with Server-Cert not found
  (ipa-server-upgrade)
    - Backport 4-5: Fix ipa-server-upgrade with server cert tracking</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-21.el7.2.2" date="1505908800">- Resolves: #1493410 ipa-server-upgrade timeouts on wait_for_open ports
  expecting IPA services listening on IPv6 ports
    - Make sure upgrade also checks for IPv6 stack
    - control logging of host_port_open from caller
    - log progress of wait_for_open_ports
- Resolves: #1493411 ipa help command returns traceback when no cache
  is present
    - Store help in Schema before writing to disk
    - Disable pylint in get_help function because of type confusion.</changelog>
  <changelog author="Felipe Barreto &lt;fbarreto@redhat.com&gt; - 4.5.0-22.el7" date="1509105600">- Resolves: #1506528 In case full PKINIT configuration is failing during
  server/replica install the error message should be more meaningful.
    - Less confusing message for PKINIT configuration during install
- Resolves: #1506526 Use X509v3 Basic Constraints "CA:TRUE" instead of
  "CA:FALSE" IPA CA CSR
    - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1506913 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
    - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1506525 server-del doesn't remove dns-server configuration
  from ldap
    - server.py: Removes dns-server configuration from ldap</changelog>
</package>
<package pkgid="f16d045f048e3c63c8151baf522d766d786a92058bbe697f8e72b67bac93d61c" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="e52e10123ed8514a218471d93d55d954fd19a8841911b8bca4073ce4d96eef43" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.2.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-11" date="1394452800">- Added missing "panic" action (RHBZ#1067670)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
</package>
<package pkgid="b3808cd17078a7517488afa9d56d1368561efd3e7b2cc4ba9592eec54f4b5886" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="6bc80d51ae168a918d4e54c3d22d3b59f3ee5bd3656405f55ce8df58137e660e" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="18.3.el7_4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.4.21-12" date="1394539200">- Fixed iptables-save man page completely wrong (RHBZ#1054871)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-13" date="1395921600">- fixed further update issues from RHEL-6 to RHEL-7 (RHBZ#1043901)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-14" date="1435665600">- Add cgroup support (RHBZ#1058660)
- Add wait seonds support for commands (RHBZ#1156411)
- Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
- Add message for init script error returns (RHBZ#1200415)
- Use flock for wait option (RHBZ#1202435)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-15" date="1442577600">- Use systemd AssertPathExists for /etc/sysconfig/iptables (RHBZ#1200415)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577601">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18.1" date="1502712000">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1481207)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.2" date="1505736000">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1491963)
- Don't restart services upon upgrade (RHBZ#1491961)</changelog>
  <changelog author="Phil Sutter - 1.4.21-18.3" date="1518523200">- Fix incorrect ip6tables.service unit syntax (RHBZ#1538549)</changelog>
</package>
<package pkgid="ad64f0099e3a4840c1d8637cae4b8f018d13a0955d2dd40a68d0b9d066128f09" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.1.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.2" date="1491307200">- Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
- Update jstack tapset to handle AArch64
- Handle unsupported architectures by calling the error function rather than a parse failure
- ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
- Resolves: rhbz#1373986</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.3" date="1491393600">- Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1422738</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294400">- Bump to 2.6.10 and u141b00.
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Update md5sum list with checksum for the new java.security file.
- Drop 8173783 backport which is now applied upstream.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493294401">- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.2" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="9960c51cf5c467a69b6726fabb1f2997d4a694a601cb0bf031919816415d992b" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.3" date="1495022400">- Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
- Resolves: rhbz#1273760</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.4" date="1496836800">- Fix merge error with "native2ascii changes file permissions of input file"
- Resolves: rhbz#1446700</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.141-2.6.10.5" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- aligned with this change, applied repackReproduciblePolycies.sh
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Drop 7177216 merge fix which is applied upstream.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675201">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="9ce4b2873ce3efcba4c178aa7c72a05ae3289cb2026679a8ecb4f5cf999d23e5" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.1" date="1501675200">- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870403">- Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870404">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Drop PR3497 AArch64 patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518609600">- Extend pr3393-rh1273760.patch so Token.getMechanismInfo can handle CK_MECHANISM
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696000">- Update to new tarball with AArch64 return value fixes, dropping local patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518696001">- Fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="364719b3244bc1910f59fe6c49b7c090c08ba34f7967157b1db37c8e6ad4ba2d" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-8.b12" date="1494590400">- Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
- Resolves: rhbz#1319875</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195200">- Added and applied patch550 8175813-rh1448880.patch
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-9.b12" date="1495195201">- Move 8175813/PR3394/RH1448880 to correct section and document.
- Resolves: rhbz#1448880</changelog>
  <changelog author="Zhengyu Gu &lt;zgu@redhat.com&gt; - 1:1.8.0.131-10.b12" date="1496232000">- Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
- Resolves: rhbz#1448880</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.131-11.b12" date="1497355200">- make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
- 1183793 is missing blocker
- Resolves: rhbz#1448880</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-12.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256001">- Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499256002">- Actually add sources for previous commit.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
- Exclude 8175887 from Shenandoah builds as it has been included in that repo.
- Resolves: rhbz#1481947</changelog>
</package>
<package pkgid="cebfda46af5e076af143eb46511cacd256e9cbef54cd679fdcad9bd1156fd94b" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241604">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="04dfaff79ba7413e74b05ebb21e2c2a8df6e429c86837f010c353f641a728327" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.151" rel="5.b12.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-0.b01" date="1508241601">- Moving patch 560 out of ppc fixes
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
- 8181055, 8181419, 8145913, 8168318, 8170328 &amp; 8181810 all now in 8u162.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328002">- Update location of policy JAR files following 8157561.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328003">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328004">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
</package>
<package pkgid="f6284a28c31f02bf8bc5cb745d4efe2187847639bdfbc8864ff65c07de94ed63" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.161" rel="0.b14.el7_4"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328000">- Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-2.b12" date="1508760000">- Add back RH1482244 AArch64 workaround now RCM-23152 is fixed.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-3.b12" date="1508846400">- Added 8164293-pr3412-rh1459641.patch backport from 8u development tree
- Resolves: rhbz#1505692</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-5.b12" date="1511179200">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
- Resolves: rhbz#1515212</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
  8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
  8175887 and 8180048 (RH1449870).(mbalao)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412800">- Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-0.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="37800130e5dcf285c2d54d00383c3684f6f0c1720e028b71864209df144a5e70" name="jss-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="9.el7_4"/>
  <changelog author="Jack Magne &lt;jmagne@redhat.com&gt; - 4.2.6-44" date="1487764800">- Bugzilla Bug #1425971 - Simple problem unwrapping AES sym keys on token</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.4.0-1" date="1489406400">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- ## JSS 4.4.0 includes the following patches ported from downstream:
- Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
- Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
- Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
  CS interface
- Mozilla Bugzilla #1307993 - Expose updated certificate verification function
  in JSS
- Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
  pointer arithmetic
- Mozilla Bugzilla #1308001 - Verification should fail when a revoked
  certificate is added
- Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
- Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
  (HSM + NSS)
- Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
- Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
- Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
  unwrapping keys should be done in the token
- Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
  manufacturer identifier
- Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
  JSS 4.2.6
- Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
  TLS v1.2 via NSS through JSS
- Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
  error from NSS
- Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
- Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
- Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
- Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
  PKCS#11 bypass support
- Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
- Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
  in FIPS Mode and ECC algorithms
- Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
  functions
- Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
- ## JSS 4.4.0 includes the following changes for building and testing:
- Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
- Mozilla Bugzilla #1346420 - Document steps required to use the proper
  libjss4.so when running certain HMAC Algorithms tests</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-2" date="1489579200">- Added Conflicts statement due to incompatibility with tomcatjss &lt; 7.2.1</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
</package>
<package pkgid="ba52a289f178b8cae47d957d6b66e130d7d57c39642a622f4c67d223b04abc85" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="297033c9b7479092021955272ffe1cd6b9e9fedef63d3a8582a0ca63c4a57b16" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="7610d45edac81f95acc7d6009c9b0e5e6a6f8ec829fd91180e9e745d0cfcea73" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="ab42c29ea19df3b2cc45c37fbb7d027d3eb75dc44cb6e3ee6c8cdb6caa206c06" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="4ad963677ac2f7bdf7a40a5fcce4a555728cf44b52a2be520b3e35705f3e19a2" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="4013639bd379bb18526507c21ab1749dfa4d6c76826d07910f2296c4bf528b4c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="8379a2fbbf1e0fb4a3aec7cde2d9d9e85a9da837b8b9354b1e2986022076967d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="9c9922715fccc9a084d8eaee8ed7d3f672b2f8018ee3aab50001cc0b64615b96" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="03ebadda452972af399a8b823231dfec149b5c960e3c03712d974846b168e8ee" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="d9cc45e354ffdfa1467dd89a9f5aeb1a25796d39359828e573973219ba2eb87a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="6a2c73e51e65e78f147d0924564e1a61a66c79ecf11c8885f66166fa0c9e042c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="3efaa51b9145ea12e8cb2bbe8ecf67297909104a6d917892621d396888d8a05f" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="d515a608daa481fdf5cb369095c45802c7969da410eb01f4f0d5556403e204c3" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="43c164717fb03fa03c2e2e19c09b698fa55dd9ed5aa35a0fb173904fbc45ac80" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="9cc22327a481a42e1e0e953da1090068515b3b2742489573317bc9395c806511" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="d839472c96eb564a6021b4d0b9083dad7682f5c66fbec9474c48f8d372f7b6ff" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="0bf35426fd1ea691d1b1c2c37b88d3c6e0b5eb819c3db560df99594b98751159" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="f8a5205eaa1d2d6cfc2a4e2728a9e1d98ebe56d6dcef86368cc1119ba75fb01b" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="0b724fe66ba45f446d62f9dfecb790331e36553fb0b7632afb79832acbc6d18f" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="26029549615fcfb3300a5d0ddf12bdb51426cdc899b073de699cddb0d3d5b939" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="01fbe832a1715289dbdf55987b8ed7284720f539d89009c1310389b5d3a398b2" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="f929426893cc5ebdf7298ca9e450b1b487917810be6817625afa42d299cdcfd6" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="78f4802a8b2f3d732322d8914c1cdf77fa80dcaccbe046f03640b1c520d379da" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="6e4e0a0d802f2549aad1ce956589d83d4ee6610185395869c1bb0a863c05b2e2" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="fd4fce8138ad2a7fe83a8b6dd2eee1b830ed8739c7935bf0288d80689738da1d" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="6ba7fd66ac8ba29bac13c531cbb39a669e3b1d198966b1a35f80a372cba221ec" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="7229135245d1a664bb0305d7d3f1983731f01dd252f4d080ffb93df4ba46d1fd" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="93c3137966b28b86270be411806e197c97c227d79ca70a5ee16957ccac8931ed" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="940d1139ef4d5a3c842179557d706248bfd79d1956b8a80fab70f6ebd2489534" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="266317d49a41a343b687aae96fa7b28044ed7db2338ace953ec3e6aa54ad41ed" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="cc509d9d84179751c21f5da704d5531e17056243994281ec95b899a22ae3a2db" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="c533ebe910ec10c6e5436c922afff6c6e27b4bc970a2b1fb807b8e1984736205" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="22ceff47a324b8d6fd720269f6d5ae6d44996b4da75f6d7d1ff113e201172cc3" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="17.2.el7_4"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-10" date="1494849600">- kdumpctl: call strip_comments only when necessary to speedup
- Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-11" date="1496232000">- makedumpfile: Fix refiltering, sadump and virsh dump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-12" date="1496318400">- kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
- Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-13" date="1496836800">- kdumpctl: change the shebang header to use /bin/bash</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-14" date="1497268800">- kdump.conf.5: clarify the fence_kdump_nodes option
- kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-15" date="1498132800">- Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
- udev rules: mask cpu hotplug rules</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-16" date="1498219200">- udev rules: fix the hotplug rule file removing path</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17" date="1498564800">- revert udev rule changes</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; - 2.0.14-17.1" date="1505476800">- fadump: rebuild default initrd with dump capture capability</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; 2.0.14-17.2" date="1506427200">- tools: powerpc: fix command line overflow error</changelog>
</package>
<package pkgid="6c4bf8e13e9280789af4c00edf62235fbd55ba46dc14d258809926e3bd558294" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="c724e6815e1db27850cd57ce4905e27fc79305def73f82f242bcf04411b7b05c" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.2"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-9" date="1472817600">- Must be bumped to 20-9 due to changes and version bumps in the
  7.2-z stream.
  Resolves: rhbz#1320204</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-10" date="1480334400">- weak-modules: deprecate --delete-modules switch.
- weak-modules: implement some pathes configuration from cmdline.
- weak-modules: redesign to reuse depmod -aeE functionality
  (with some preparation changes).
  This is an updated version of the script which doesn't support
  multiple installation of the same out-of-tree module (stored in the
  'extra' subdirectory). But it more correctly checks dependencies
  between the modules.
  Resolves: rhbz#1367942</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
</package>
<package pkgid="1dac286b454fb009e6144ba120dc60304fc57944de401d2d05382eb072d207c2" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="26437cbf647d39ad9acb6ca6d73c506ada2e88a0ba584724547b7c6b08f41562" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.4"/>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 20-10" date="1486036800">- Rename patches so they are not specific to the build. This was
  causing problems with z-stream builds.
  Resolves: rhbz#1416498</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-11" date="1487246400">- Rebuild package with updated rpm macros.
  Resolves: rhbz#1420768</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
</package>
<package pkgid="5a090bb889d8bb57a15cc4b05c4cc77d4d565b1b7615e486a98ef06360840f02" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="2be6cfb016af4b6b472de713d93997595ef7f2748849703cc87fd35e94c3dfae" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.6"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-12" date="1487678400">- weak-modules: fix coverity introduced by latest changes
- weak-modules: fix "permission denied" on some upgrades.
  Resolves: rhbz#1416566</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
</package>
<package pkgid="c059f6580a42fcfa75fc7c932e6d341716d8e4363b9fa7975704c57864937558" name="kmod-debuginfo" arch="i686">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="203b3e8bd56a12f0b331233001ce0a5281206fe1ca3f40b6c647b447962cc076" name="kmod-debuginfo" arch="x86_64">
  <version epoch="0" ver="20" rel="15.el7_4.7"/>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-13" date="1490616000">- Remove kmod-20.tar from sources, kmod-20.tar.xz is used.
  Resolves: rhbz#1434319</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-14" date="1493985600">- weak-modules: check if kernel installed for the final depmod.
  Resolves: rhbz#1448349</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15" date="1494590400">- weak-modules: install weak link even if there is same name in extra.
  Resolves: rhbz#1450003</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.1" date="1499860800">- weak-modules: fallback weak-modules state if incompatible installed
  Resolves: rhbz#1469990</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.2" date="1502971200">- libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
- weak-modules: process only weak-updates related depmod output.
  Resolves: rhbz#1482385</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.3" date="1505390400">- weak-modules: implement dry run by symlink restoration.
- weak-modules: fix dry-run for non-lib-modules installation.
  Resolves: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.4" date="1505476800">- bump up version for internal reasons.
  Related: rhbz#1489696.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.5" date="1510315200">- weak-modules: use function to generate weak_updates_dir
- weak-modules: implement dry-run on the tempdir
  Resolves: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.6" date="1510833600">- Backport external directories support.
  Related: rhbz#1511943.</changelog>
  <changelog author="Yauheni Kaliuta &lt;ykaliuta@redhat.com&gt; - 20-15.el7_4.7" date="1513166400">- depmod: module_is_higher_priority: fix modname length calculation.
  Resolves: rhbz#1525364.</changelog>
</package>
<package pkgid="da1a1b7f5e91a599b84082ed2830a06e46597eb1766721b30810525f0bd4b348" name="kmod-redhat-i40e-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.14_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40e module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549986</changelog>
</package>
<package pkgid="2b08eddc00e7606664306f994d9b2020bf9750dbf803cc1ad45e500b7e272c7d" name="kmod-redhat-i40evf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.1_k_dup7.4" rel="2.1.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-1" date="1519732800">- 141332170ff595319ce42a2cfc2944c2cbb11b4f
- i40evf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 3.0.1_k_dup7.4-2" date="1519905600">- Rebuilt with -mindirect-branch=thunk-inline -mindirect-branch-register flags.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.1.14_k_dup7.4-2.1" date="1521115200">- Added modinfo flag for retpoline.
- Resolves: #bz1549985</changelog>
</package>
<package pkgid="d50596799800d85ef4effd51f056243f2ec52334974bd5f2e0b5c4cd10b1027e" name="kmod-redhat-qed-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qed module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="4741fa22366ab86b2d7a657e2cbb79578b65e2790ff02b35e73a55993c0e3aa3" name="kmod-redhat-qede-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.21_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qede module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.21_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="09bcc48af732e0ecae3dab081d0f3cedd8faac456b49ca56e8408c0654d489bb" name="kmod-redhat-qedf-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.7.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedf module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.7.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="0d893b1028d17b3f4419ac9d81e0d6b4d0657af31b0459a3d4f9c9419f507e6e" name="kmod-redhat-qedi-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.4.0_dup7.4" rel="3.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedi module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-2" date="1513252801">- Remove ppc architectures</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.4.0_dup7.4-3" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="7ba5d2596bcfa4b14327cba31c7888c2bb2835ddc579f6481828cf8544d278ef" name="kmod-redhat-qedr-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.10.10.0_dup7.4" rel="2.el7_4"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-1" date="1513252800">- 0413ea41707374d85a707b850cd0b318d3d5d132
- Resolves: #bz1525991, #bz1525992
- qedr module for Driver Update Program</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 8.10.10.0_dup7.4-2" date="1513684800">- Do not call dracut on non-existing kernel</changelog>
</package>
<package pkgid="663793a28af316aded56e51c6ba0b39bd87c25e5a371155d3fce8d3fdad8585f" name="ksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="20120801" rel="35.el7_4"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1461672000">- closing a file descriptor in a command substitution caused loss of the output (#1202439)
- fix: in a login shell "( cmd &amp; )" does nothing (#1217237)
- exporting fixed with variable corrupted its data (#1192026)
- fix segfault when handling a trap (#1211540)
- combining alarm and IFS caused segfault (#1192119)
- declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
- do not inherit invalid variables during shell initializaton (#1211538)
- case in a for loop inside a subshell caused syntax error (#1241014)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-27" date="1486728000">- bump release
  Resolves: #1391931</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-28" date="1486728001">- Fix a bug in memory allocation while listing indexed arrays with typeset
  Resolves: #1371630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-29" date="1486728002">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1321443</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-30" date="1486728003">- Fix a memory leak in subshell when PATH is set
  Resolves: #1405784</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-31" date="1486728004">- Fix a memory leak on unset of associative array
  Resolves: #1189297</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-32" date="1486728005">- Treat unset parameters as error
  Resolves: #1222025</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-33" date="1486728006">- Prevent null-test optimization in strdup
  Resolves: #1269088</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1486728007">- Multibyte character string after $1-9 was not expanded correctly
  Resolves: #1299484</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
</package>
<package pkgid="d35e2e9d115d64cf028a1b44b46699616076e0bb1c481b67fb64838825d1060d" name="libdb-debuginfo" arch="i686">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="ace2efb00ec6ba2f41d486cd09353ed52ccfb0380dec37b694d594ba6ae4d677" name="libdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.21" rel="21.el7_4"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-13" date="1383652800">- Updated config files for the aarch64 (#1023795)</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-14" date="1383652801">- Backported fix for possible signed overflow (#1026878)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-16" date="1389873600">- Added Obsoletes in order to override unsupported db4 versions</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.3.21-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.3.21-18" date="1406203200">- Concurrent access due to a race in CDB
  Resolves: #1099509</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 5.3.21-19" date="1441281600">- Add patch to workaround issues on large systems (&gt;1024 CPU)
  Resolves: #1245410</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 5.3.21-20" date="1481716800">- Fix mutexes not being released properly (#1277887)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-20" date="1490011200">- Add man pages for libdb-utils (#1395665)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; 5.3.21-21" date="1513598400">- Fix deadlocks when reading/writing off-page duplicate tree (#1526929)</changelog>
</package>
<package pkgid="9eec008c403177b7e39c89fa7cc140cbb76a505af7e9456b511c96ebfadc1dff" name="libev-debuginfo" arch="i686">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="c44e479ec05bf5eb925a4f3bd2856ebdebb64b5cf5194b6ff2d9c526c4fff186" name="libev-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15" rel="7.el7"/>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-1" date="1348833600">- Update to 4.11</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.11-2" date="1360324800">- Make a patch out of Michal's pkgconfig support.
- Modernize the configure.ac file for Automake &gt;= 1.13.
- Respect the Fedora CFLAGS
  https://bugzilla.redhat.com/show_bug.cgi?id=908096</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.11-3" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-1" date="1378641600">- Update to 4.15 (rhbz 987489)
- Fix dates in spec</changelog>
  <changelog author="Igor Gnatenko &lt;i.gnatenko.brain@gmail.com&gt; - 4.15-2" date="1378641601">- Bump (koji was broken)</changelog>
  <changelog author="Mathieu Bridon &lt;bochecha@fedoraproject.org&gt; - 4.15-3" date="1385467200">- Get the package closer to what upstream intended:
  - Do not move the headers into a subfolder of /usr/include
  - Make a libev-libevent-devel subpackage to contain the libevent
    compatibility header, so that only this subpackage conflicts with
    libevent-devel, not all of libev-devel
  - Drop the pkgconfig file, as upstream rejected it several times already.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-4" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-5" date="1439899200">- Resolves: rhbz#1254667 - increment release tag to ship devel</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 4.15-6" date="1439899201">- update compiler flag to get rid of strict-aliasing warning</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 4.15-7" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="80d220ef6d5057da9e9b73fcccdd10ee0d85fc16451ebfeae21d4ebc7186b784" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.36.3" rel="6.el7_4.3"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.52" date="1441713600">- v2v: Warn if Group Policy or AV software may result in 7B boot failure
  (1260689)
- v2v: Fix OVF XML to enable qxl display
  resolves: rhbz#1260590</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.53" date="1441886400">- v2v: Error if certain options appear twice on the command line (1261242)
- v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
- v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
- v2v: Detect AVG Technologies as AV software (1261436)
  resolves: rhbz#1261281</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.54" date="1442145600">- v2v: Permit libguestfs-winsupport to be used by virt-win-reg and
  virt-inspector (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.28.1-1.55" date="1442232000">- Fix previous commit by applying the patch this time (1243493)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.1" date="1499860800">- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1469902</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.2" date="1500292800">- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471829</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6.el7_4.3" date="1501675200">- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1480623</changelog>
</package>
<package pkgid="919e2579595ad310dcec642392a5d3fedcc8a8eed23aa1bb36254d29dc8d1676" name="liblouis-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="a83160747cab3856982878aaeca4d7bb5be7c1b45c1540f22c91869d1cb16f5d" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="11.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-2" date="1361534400">- Moved documentation to doc subpackage.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
</package>
<package pkgid="72f1b17ce4234ab8a5b51ac9354bbe25bc5b399ded969055b47cee5aed9fe03a" name="liblouis-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="55d36a8caab9b7694d939148ffd973ad6ce00d93104be2e3b21cf6cb363806c3" name="liblouis-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="12.el7_4"/>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-3" date="1361880000">- Added Python 3 language bindings.</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-4" date="1366027200">- Don't depend on python3 in RHEL.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-5" date="1366027201">- Restrict exclusion of Python 3 packages to RHEL &lt; 7.</changelog>
  <changelog author="Martin Gieseking &lt;martin.gieseking@uos.de&gt; 2.5.2-6" date="1366113600">- Restrict exclusion of Python 3 packages to RHEL &lt;= 7.</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5.2-7" date="1374148800">- Tighten dependencies between subpackages (pointed out by rpmdiff)</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-8" date="1383739200">- Resolves: rhbz#987026 - liblouis - shebang with /usr/bin/env</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5.2-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-11" date="1505476800">- Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
  CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 2.5.2-12" date="1510315200">- Resolves: CVE-2017-15101</changelog>
</package>
<package pkgid="1401b8f92d6baa5ac23b72c2939eaeee624cfc2459fefd21453f1d13ca163a9e" name="libpciaccess-debuginfo" arch="i686">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="6d35f1f74bc41c3474bed03f485fc837401ce561c04b5a026b891659009fd7d5" name="libpciaccess-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.13.4" rel="3.1.el7_4"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13-2" date="1332936000">- libpciaccess-macros.patch: Fix out* macros again</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-1" date="1334059200">- libpciaccess 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.13.1-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.13.1-4.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-1" date="1432209600">- rebase libpciaccess 0.13.4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 0.13.4-2" date="1432296000">- rebuild due to ppc64le relro issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 0.13.4-3" date="1479124800">- add support to ignore 32-bit domains (#1380184)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.13.4-3.1" date="1509019200">- Add support for 32-bit domains</changelog>
</package>
<package pkgid="9c0bad4fbf08b3d6e4b341d4e93a57ee3209fb6b66b69857ba9e41cc3b98ca9d" name="libreoffice-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="955391ef454e1712dc6d93ca0c09011f0e01e0c7c694f699f8050ecc352e5c5c" name="libreoffice-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.6.2" rel="15.el7_4"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-6" date="1487678400">- Resolves: rhbz#1401082 gnome hangs opening certain docx
- Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-7" date="1490529600">- Resolves: rhbz#1431539 gnome-documents needs libreofficekit
- Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
  Calc and Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-8" date="1490961600">- Resolves: rhbz#1437537 fix csv a11y</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:5.0.6.2-9" date="1493208000">- Resolves: rhbz#1445635 CVE-2017-7870 Heap-buffer-overflow in
  tools::Polygon::Insert</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-10" date="1494417600">- Resolves: rhbz#1444437 segv in gnome-documents integration</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-11" date="1495713600">- Related: rhbz#1444437 restart second instance cleanly</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-12" date="1496750400">- Resolves: rhbz#1454598 crash on selecting bullet from toolbar</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-13" date="1497528000">- Related: rhbz#1444437 remove timer if document closed before it fires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-14" date="1497614400">- Resolves: rhbz#1454693 segv on interrupting tiled rendering</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.0.6.2-15" date="1518609600">- Resolves: rhbz#1545034 - CVE-2018-1055 CVE-2018-6871</changelog>
</package>
<package pkgid="140c999c4cd044c08361034b6bfab95f8958aad8718eee7e5954a523cdfed5cb" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.20" rel="5.el7_4"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5" date="1445428800">- Resolves: rhbz#1271811 libreswan FIPS test mistakenly looks for non-existent file hashes</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1467720000">- Resolves: rhbz#1283468 keyingtries=0 is broken
- Resolves: rhbz#1297816 When using SHA2 as PRF algorithm, nonce payload is below the RFC minimum size
- Resolves: rhbz#1344567 CVE-2016-5361 libreswan: IKEv1 protocol is vulnerable to DoS amplification attack
- Resolves: rhbz#1313747 ipsec pluto returns zero even if it fails
- Resolves: rhbz#1302778 fips does not check hash of some files (like _import_crl)
- Resolves: rhbz#1278063 Unable to authenticate with PAM for IKEv1 XAUTH
- Resolves: rhbz#1257079 Libreswan doesn't call NetworkManager helper in case of a connection error
- Resolves: rhbz#1272112 ipsec whack man page discrepancies
- Resolves: rhbz#1280449 PAM xauth method does not work with pam_sss
- Resolves: rhbz#1290907 ipsec initnss/checknss custom directory not recognized
- Resolves: rhbz#1309764 ipsec barf does not show pluto log correctly in the output
- Resolves: rhbz#1347735 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1219049 Pluto does not handle delete message from responder site in ikev1
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request
- Resolves: rhbz#1315412 ipsec.conf manpage does not contain any mention about crl-strict option
- Resolves: rhbz#1229766 Pluto crashes after stop when I use floating ip address</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1470657600">- Resolves: rhbz#1311360  When IKE rekeys, if on a different tunnel, all subsequent attempts to rekey fail
- Resolves: rhbz#1361721 libreswan pluto segfault</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-8" date="1473249600">- Resolves: rhbz#1361721 libreswan pluto segfault [UPDATED]
- Resolves: rhbz#1276524 [USGv6] IKEv2.EN.R.1.1.3.2 case failed due to response to bad INFORMATIONAL request [UPDATED]
- Resolves: rhbz#1309764 ipsec barf [additional man page update and --no-pager]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-0.1.dr3" date="1487592000">- Resolves: rhbz#1399883 rebase libreswan to 3.20</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-1" date="1489492800">- Resolves: rhbz#1399883 rebase libreswan to 3.20 (full release)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-2" date="1492084800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels
- Resolves: rhbz#1444115 FIPS: libreswan must generate RSA keys with a minimal exponent of F4, nor E=3
- Resolves: rhbz#1341353 Allow Preshared Key authentication in FIPS mode for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-3" date="1497268800">- Resolves: rhbz#1372279 ipsec auto --down CONNECTION returns error for tunnels [updated]
- Resolves: rhbz#1458227 CAVS test driver does not work in FIPS mode
- Resolves: rhbz#1452672 (new-ksk-libreswan-el7) DNSSEC trust anchor cannot be updated without recompilation</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-4" date="1508414400">- Resolves: rhbz#1501809 libreswan does not establish IKE with xauth enabled but modecfg disabled
- Resolves: rhbz#1503949 xauth password length limited to 64 bytes while XAUTH_MAX_PASS_LENGTH (128)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.20-5" date="1508846400">- Resolves: rhbz#1503949 [updated - USE_DNSSEC setting was updated]</changelog>
</package>
<package pkgid="3b2fbd98fb9697cef7e9f94c9eaaefa0c72f75e1fa324e9005d6d1ab6542357f" name="libsoup-debuginfo" arch="i686">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="11e19bb72353aceff931ae69e9388c978621d2c3854dfe6126fa3a1e1e798699" name="libsoup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.56.0" rel="4.el7_4"/>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.46.0-3" date="1413720000">- Apply upstream patch to fix a crash in evolution (rh #1097202)</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-2" date="1430136000">- Update to 2.48.1
- Resolves: #1174446</changelog>
  <changelog author="Dan Winship &lt;danw@redhat.com&gt; - 2.48.1-3" date="1432641600">- Fix "make check" when LC_ALL is set (rh #1224989)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-4" date="1460548800">- Update ja.po translation file (rh #1304238)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-5" date="1460548801">- soup_headers_parse: deal with NUL bytes in headers (rh #1302366)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.48.1-6" date="1461067200">- NTLM auth failure with latest samba (rh #1328453)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.56.0-1" date="1474286400">- Update to 2.56.0
- Resolves: #1387019</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.56.0-2" date="1493208000">- Add patch to address some of Coverity Scan and clang reported issues</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-3" date="1498132800">- libsoup stuck on infinite loop for kerberized pages (rh #1439798)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.56.0-4" date="1502280000">- Fix chunked decoding buffer overrun (CVE-2017-2885) (rh #1479322)</changelog>
</package>
<package pkgid="25f06f8588f6b9fe57d876c8411c247205f60616d63e9d5c8c1af5d1432f950d" name="libssh-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="ee908f01310890ea0c9c96edae6a6f1ee9005a53121fea57bee96bb9f319d2df" name="libssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="3.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.0-1" date="1389182400">- Update to 0.6.0</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.1-1" date="1392033600">- Update to version 0.6.1.
- resolves: #1056757 - Fix scp mode.
- resolves: #1053305 - Fix known_hosts heuristic.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.6.3-1" date="1393934400">- Fix CVE-2014-0017.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-1" date="1427889600">- Security fix for CVE-2014-8132.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-2" date="1429617600">- Security fix for CVE-2015-3145.</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-3" date="1429704000">- Enable _hardened_build</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.6.4-4" date="1429704001">- Updated patch for CVE-2015-3146</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-1" date="1436184000">- Updated to 0.7.1 release rhbz#1239085</changelog>
  <changelog author="- Stef Walter &lt;stefw@redhat.com&gt; - 0.7.1-2" date="1456142400">- Security fix for CVE-2016-0739 rhbz#1305971</changelog>
  <changelog author="- Dominik Perpeet &lt;dperpeet@redhat.com&gt; - 0.7.1-3" date="1490184000">- Fix agent auth on big endian machines</changelog>
</package>
<package pkgid="e0b5da48813c058d9bfde81e715fd2234fa80defca567d95f2c88f687d7ed711" name="libstoragemgmt-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="7a65d74e8a057c9364e11733301c5ef8c3c6767c40c150dcec4655525d1cab55" name="libstoragemgmt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_4"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-4" date="1466510400">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1348394</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-5" date="1466596800">- Fix compile warning by removing unused static function _sd_name_of().</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-6" date="1466596801">- Apply the forgotten patch6.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.2-7" date="1468411200">- Fix https://bugzilla.redhat.com/show_bug.cgi?id=1355637</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.3.4-1" date="1470225600">- Upgrade to 1.3.4</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-1" date="1487678400">- Add Python3 support.
- New sub rpm package python3-libstoragemgmt.
- Add support of lmiwbem.
- Allow plugin test to be run concurrently.
- Bug fixes:
    * Fix megaraid plugin for dell PERC.
    * Fix local disk rotation speed query on NVMe disk.
    * Fix lsmcli incorrect try-expect on local disk query.
    * Fix all the gcc compile warnings.
    * Fix the obsolete usage of AC_OUTPUT in configure.ac.
- Library adds:
    * Query serial of local disk:
        lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
    * Query LED status of local disk:
        lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
    * Query link speed of local disk:
        lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-2" date="1487851200">- Include a patch for incorrect use of sizeof in C library.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.4.0-3" date="1490875200">- Fix ONTAP SSL connection. # RHBZ 1437130</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-4" date="1510228800">- Fix incorrect VPD query for mptsas # RHBZ 1511467</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.4.0-5" date="1510315200">- Add missing runtime requirement -- python-six</changelog>
</package>
<package pkgid="cbddb9055655eab24237499a0f952c7315cd18f08078933d6f3b02a3d69eb4fd" name="libteam-debuginfo" arch="i686">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="3fe25c33b82951f7f3d5cab0672f017ab9175bae9a97883374642c1fa36cdd37" name="libteam-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.25" rel="6.el7_4.3"/>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-5" date="1441972800">- Added patch fixing typo on delay_up [1242628]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.17-6" date="1449057600">- Added patch Fix sending duplicate LACP frames at the start [1267494]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.22-1" date="1449835200">- Updated to 1.22 [1286840]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.23-1" date="1453291200">- Updated to 1.23 [1286840 1273052]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-2" date="1466683200">- Updated to 1.25 [1286840 1286063]
- Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-4" date="1471435200">- Added patches to avoid hung on shutdown [1330550]
- Added patch to fix an out-of-bound write with zero-length hardware
  address [1286840]</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.25-5" date="1490356800">- Added patch to escape some sensitive characters [1383997]
- Added patch to check port link_up when a port is added for lb runner
  [1393430]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.1" date="1504094400">- Added patch to set correct bits for standby ports [1486130]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-5.el7_4.2" date="1518004800">- Added fix to only process LACPDU after port ifinfo is set [1542980]</changelog>
  <changelog author="Marcelo Ricardo Leitner &lt;mleitner@redhat.com&gt; - 1.25-6.el7_4.3" date="1518177600">- Add port_hwaddr_changed for ab, lb and lacp runners [1544339]</changelog>
</package>
<package pkgid="14d9c07776bcba37022681d24c114e4fedeb31af6bbb4e131f32d0b482cb58bb" name="libtevent-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="4c9674656e2e48277c4ebafbfba6f882c5fc7e44c39485179b60621cad94e05f" name="libtevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.31" rel="2.el7_4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-1" date="1409832000">- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer
- removes upstreamed patches</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-2" date="1416830400">- Allow building with RHEL-7.0 libtalloc
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.21-3" date="1416830401">- BuildRequire the minimal applicable libtalloc version
- Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.24-1" date="1433332800">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.25-1" date="1434283200">- Resolves: rhbz#1226049 - Rebase libtevent to at least 0.9.22 in RHEL-7.2</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- Resolves: #1309439 - libtevent leaks memory during signal handling</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.28-1" date="1465473600">- Resolves: #1320247 - Rebase libtevent to version 0.9.28</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-1" date="1487073600">- Resolves: #1393812 - Rebase libtevent in RHEL-7.4 to version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.31-2" date="1487073601">- Resolves: #1513984 - tevent can cause a Samba file corruption bug under
                       heavy threaded load [rhel-7.4.z]</changelog>
</package>
<package pkgid="00b04db832420d8bcf47396f7458f0dd7d646f81481b42d47666701f55fc7cec" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="abf09bdb44c6cc10f676415844c1a93b3804b780ada4bdd9a13e372206c74ca1" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-8" date="1496836800">- qemu: mkdir memory_backing_dir on startup (rhbz#1214369)
- qemu: Don't error out if allocation info can't be queried (rhbz#1452045)
- daemon: Don't initialize SASL context if not necessary (rhbz#1450095)
- virDomainXMLOption: Introduce virDomainABIStabilityDomain (rhbz#1450349)
- virQEMUDriverDomainABIStability: Check for memoryBacking (rhbz#1450349)
- qemu: process: Save vcpu ordering information on reconnect (rhbz#1451251)
- audit: Fix the output message for shmem (rhbz#1218603)
- qemu: Set operation on completed migration job (rhbz#1457052)
- qemu: Conditionally allow block-copy for persistent domains (rhbz#1459113)
- virsh: Add support for VIR_DOMAIN_BLOCK_COPY_TRANSIENT_JOB (rhbz#1459113)
- qemu: Fix serial stub console allocation (rhbz#1434278)
- conf: Make error reporting in virCPUDefIsEqual optional (rhbz#1441662)
- conf: Refactor virCPUDefParseXML (rhbz#1441662)
- conf: Make virDomainSnapshotDefFormat easier to read (rhbz#1441662)
- conf: Pass xmlopt to virDomainSnapshotDefFormat (rhbz#1441662)
- qemu: Rename xml_len in virQEMUSaveHeader as data_len (rhbz#1441662)
- qemu: Fix memory leaks in qemuDomainSaveImageOpen (rhbz#1441662)
- qemu: Introduce virQEMUSaveData{New,Free} (rhbz#1441662)
- qemu: Introduce virQEMUSaveDataFinish (rhbz#1441662)
- qemu: Refactor qemuDomainSaveHeader (rhbz#1441662)
- qemu: Introduce virQEMUSaveData structure (rhbz#1441662)
- conf: Introduce virSaveCookie (rhbz#1441662)
- conf: Add save cookie callbacks to xmlopt (rhbz#1441662)
- qemu: Implement virSaveCookie object and callbacks (rhbz#1441662)
- qemu: Store save cookie in save images and snapshots (rhbz#1441662)
- qemu: Remember CPU def from domain start (rhbz#1441662)
- qemu: Report the original CPU in migratable xml (rhbz#1441662)
- qemu: Always send persistent XML during migration (rhbz#1441662)
- qemu: Send updated CPU in migration cookie (rhbz#1441662)
- qemu: Store updated CPU in save cookie (rhbz#1441662)
- qemu: Use updated CPU when starting QEMU if possible (rhbz#1441662)
- docs: correct improper information about domain states in virsh manpage (rhbz#1408778)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836801">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
</package>
<package pkgid="1dc8f8454a6a38cf7a4d722a811c57eee32f344d9e0a741af51f8d549987a3cb" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="1001a6eae15ccbeb7351f18a0c2d12e3fdb11e7d4162d8dab15930da88f846e5" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-9" date="1496836800">- Rebuild</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
</package>
<package pkgid="f909305ab3c3d88b93f5233eecc7ec78805d706c40292b5338e3a379d32e96ca" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="05a101503ca66131ed27dc1533dbc2e2aa438161160b20112c172813c3afbff1" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-10" date="1497441600">- qemu: Set iface MTU on hotplug (rhbz#1408701)
- Use a separate buffer for &lt;input&gt; subelements (rhbz#1283251)
- Use a separate buffer for &lt;disk&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;controller&gt;&lt;driver&gt; (rhbz#1283251)
- Use a separate buffer for &lt;filesystem&gt;&lt;driver&gt; (rhbz#1283251)
- conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
- conf: add iotlb attribute to iommu (rhbz#1283251)
- qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
- qemuxml2xmltest: add virtio-options test (rhbz#1283251)
- conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
- Add virtio-related options to interfaces (rhbz#1283251)
- add virtio-related options to memballoon (rhbz#1283251)
- Add virtio-related options to disks (rhbz#1283251)
- Add virtio-related options to controllers (rhbz#1283251)
- Add virtio-related options to filesystems (rhbz#1283251)
- Add virtio-related options to rng devices (rhbz#1283251)
- Add virtio-related options to video (rhbz#1283251)
- Add virtio-related options to input devices (rhbz#1283251)
- qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
- qemu: format virtio-related options on the command line (rhbz#1283251)
- qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
- qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
- qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
- qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
- qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
- qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
- qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-11" date="1497960000">- util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
- util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
- util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
- util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
- util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
- util: storage: Report errors when source host data is missing (rhbz#1461638)
- util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
- util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
- util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
- util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
- qemu: Allow live-updates of coalesce settings (rhbz#1414627)
- qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
- util: storage: Export virStorageIsRelative (rhbz#1461303)
- storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
- qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
</package>
<package pkgid="89557829dc0e6e19a0d55392d303bdf9a448eb97a6a63bb1c304a76bfffe9333" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="4935152b637da14c66b53f5e1a6ac6d1e1d7f42bfdab71191f0ff96afd1db568" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-12" date="1498046400">- util: storage: Make @backingFormat optional in virStorageFileGetMetadataInternal (rhbz#1461303)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-13" date="1498046401">- qemu: Change coalesce settings on hotplug when they are different (rhbz#1414627)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046402">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
</package>
<package pkgid="a71eda7b9adb694509f28bff2ae6f5fa582d3a7c1c262af7fed32ff4b6d9548e" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="37aaab6714ac5ef63ac07b4f01ccc092299d5ca4af1f0b71919d165745638714" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="14.el7_4.9"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14" date="1498046400">- qemu: Do not skip virCPUUpdateLive if priv-&gt;origCPU is set (rhbz#1441662)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.1" date="1499947200">- qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
- cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
- qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
- qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
- qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
- qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
- qemu: Update host-model CPUs on reconnect (rhbz#1470582)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.2" date="1500379200">- qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
- qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.3" date="1503403200">- Add support for virtio-net.tx_queue_size (rhbz#1482514)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.4" date="1509969600">- qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
- qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
- conf: Introduce virCPUDefFindFeature (rhbz#1508549)
- qemu: Filter CPU features when using host CPU (rhbz#1508549)
- qemu: Fix CPU model broken by older libvirt (rhbz#1508549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.5" date="1512129600">- qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
- qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
- qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.6" date="1513252800">- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.7" date="1513684800">- qemu: Properly store microcode version in QEMU caps cache (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
- qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
- qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
- qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
- qemu: introduce qemu domain job status (rhbz#1530130)
- qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
- qemu: start all async job with job status active (rhbz#1530130)
- qemu: introduce migrating job status (rhbz#1530130)
- qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
- qemu: Fix type of a completed job (rhbz#1530130)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-14.el7_4.9" date="1516363200">- qemu: Fix crash in offline migration (rhbz#1530130)
- RHEL: qemu: Report full stats for completed migration (rhbz#1530130)</changelog>
</package>
<package pkgid="212acb2dc60f5831f7d2310d27d234e9b5d5de3d0230af19e12ff44e5f09cf63" name="libvirt-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="3.el7_4.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 1.3.5-1" date="1465387200">- Rebased to libvirt-python-1.3.5 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-1" date="1467374400">- Rebased to libvirt-python-2.0.0 (rhbz#1286680)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.0.0-2" date="1470052800">- Fix crash in storage pool refresh callback (rhbz#1354271)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 2.5.0-1" date="1481025600">- Rebased to libvirt-python-2.5.0 (rhbz#1382642)
- The rebase also fixes the following bugs:
    rhbz#1377071</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.0.0-1" date="1486468800">- Rebased to libvirt-python-3.0.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.1.0-1" date="1488542400">- Rebased to libvirt-python-3.1.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-1" date="1491220800">- Rebased to libvirt-python-3.2.0 (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-2" date="1493812800">- Rebuild libvirt-python (rhbz#1382642)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3" date="1496836800">- rebuild libvirt-python to pickup new flag for virDomainBlockCopy (rhbz#1459183)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.2.0-3.el7_4.1" date="1506945600">- Release the GIL during virDomainGetMemoryStats &amp; virDomainGetDiskErrors (rhbz#1497197)</changelog>
</package>
<package pkgid="e912470186e2e5eae5157480a0b7b930ef0b08d59888f0c52f9e36980185bea4" name="linuxptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8" rel="3.el7_4.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.3-1" date="1375444800">- update to 1.3</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-1.20140718gitbdb6a3" date="1409745600">- update to 20140718gitbdb6a3 (#1108795, #1059039)
- fix PIE linking (#1092537)
- replace hardening build flags with _hardened_build
- include simulation test suite</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-2.20140718gitbdb6a3" date="1413288000">- add timemaster (#1085580)
- send peer messages to correct address
- make NTP SHM segment number configurable
- update UDS handling to allow running multiple ptp4l/phc2sys instances
- fix warnings from static analysis</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; 1.8-3.1" date="1504872000">- Resolves: #1489425 - Race condition in phc2sys</changelog>
</package>
<package pkgid="6e71f421d2da0cd547feae65669f7fd866b6433e17cccce645d2f599a0a1f43b" name="mailman-debuginfo" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="26.el7_4.1"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-19" date="1426593600">- fix #1188043 - set 2775 permission only for /etc/mailman</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-20" date="1426593601">- fix #1107652 - do not install patch backup files in documentation</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 3:2.1.15-21" date="1433937600">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-22" date="1486728000">- Resolves: #1351939 - Mailman 2.1.15 and later crashes on more email</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.1" date="1518782400">- Resolves: #1545974 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-24.2" date="1519992000">- Resolves: #1545974 -  Add sanitizer to mitigate XSS injection</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992001">- Related: #1545974 - Bump release to make it higher than 7.5</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26.1" date="1519992002">- Related: #1545974 - Add import regular expression module</changelog>
</package>
<package pkgid="76348c2972ba1097eea5ac1cf7e75ec184663dc1afc0bc381e81e1275d86b1c4" name="mercurial-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="8.el7_4"/>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.5.2-2" date="1363608000">- Add hgweb.wsgi</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6-1" date="1368014400">- Update to 2.6</changelog>
  <changelog author="nbecker &lt;ndbecker2@gmail.com&gt; - 2.6.2-1" date="1370520000">- Update to 2.6.2</changelog>
  <changelog author="Ondrej Oprala &lt;ooprala@redhat.com&gt; - 2.6.2-2" date="1380888000">- Use an absolute pathname in hg-ssh's shebang (#987029)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6.2-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-5" date="1460635200">- Fix CVE-2016-3068 and CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-6" date="1460635201">- fix previous patch for CVE-2016-3069</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-7" date="1497528000">- Fix CVE-2017-9462</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 2.6.2-8" date="1502798400">- Fix CVE-2017-1000115 and CVE-2017-1000116</changelog>
</package>
<package pkgid="3f30459caec1a540dfadfb71d2828c819f797e9ff4ec38b0ec7b2669dc284245" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.2.el7"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="367aa62eca897f8f4a61d21d533c849d82a7c0c947281b668447b445c14a33de" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.2.sdl7.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-15" date="1467201600">- Load CPU microcode update only on supproted systems.
- Resolves: #1307179</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-16" date="1469102400">- Update to upstream 2.1-10. Intel CPU microcode update to 20160714.
- Resolves: #1358047</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-17" date="1480507200">- Move dracut call into posttrans phase.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
</package>
<package pkgid="2bf6009b7cc662037f0514fe84cb913bc7a3fd610ef492f04edb1347410e880d" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="22.5.el7_4"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-18" date="1481889600">- Fix issue with hot microcode cpu reload.
- Resolves: #1398698</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-19" date="1483963200">- Fix broken quoting in ExecStart line.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-20" date="1484740800">- Fix issue with hot microcode cpu reload.
- Resolves: #1411232</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-21" date="1488888000">- Rpm scriptlets should only rebuild the current kernel's initrd.
- Resolves: #1420180</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22" date="1495627200">- Update to upstream 2.1-12. Intel CPU microcode update to 20170511.
- Resolves: #1384218</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.1" date="1500984000">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1474844</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527358</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.3" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1531453</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.4" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533971</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-22.5" date="1516017600">- Use right upstream source for revert
- Resolves: #1533971</changelog>
</package>
<package pkgid="86e6f7ad4d029f3997480bc883057dc4635ce6e3ea818057871287d127eec3dd" name="mod_fcgid-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="4.el7_4.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; 2.3.7-2" date="1335960000">- Use 10- prefix for conf file in conf.modules.d with httpd ≥ 2.4
- Use _httpd_confdir throughout</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-3" date="1335960001">- Make %files list more explicit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.7-4" date="1341403200">- Move tmpfiles.d config from %{_sysconfdir} to %{_prefix}/lib</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-5" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; 2.3.7-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 2.3.9-1" date="1381233600">- Update to 2.3.9
  - SECURITY: Fix possible heap buffer overwrite (CVE-2013-4365)
  - Add experimental cmake-based build system for Windows
  - Correctly parse quotation and escaped spaces in FcgidWrapper and the AAA
    Authenticator/Authorizor/Access directives' command line argument, as
    currently documented (PR#51194)
  - Honor quoted FcgidCmdOptions arguments (notably for InitialEnv
    assignments) (PR#51657)
  - Conform script response parsing with mod_cgid and ensure no response body
    is sent when ap_meets_conditions() determines that request conditions are
    met
  - Improve logging in access control hook functions
  - Avoid making internal sub-requests and processing Location headers when in
    FCGI_AUTHORIZER mode, as the auth hook functions already treat Location
    headers returned by scripts as an error since redirections are not
    meaningful in this mode
  - Revert fix for PR#53693, added in 2.3.8 but undocumented
  - Fix issues with a minor optimization added in 2.3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.3.9-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.9-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.3.9-4.1" date="1508155200">- Resolves: #1501307 - mod_fcgid cause Segmentation fault error while doing
  large file uploads over HTTPS</changelog>
</package>
<package pkgid="d80afd8dcef1f29f260caa0d5ec026fc2ed5f3c5b957479d0d94f48143ae9cbb" name="mod_nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.14" rel="10.el7_4.1"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 1.0.14-2" date="1467115200">- mod_nss sets r-&gt;user in fixup even if it was long ago changed
  by other module (#1347298)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-3" date="1470657600">- Clean up semaphore in nss_pcache on shutdown (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-4" date="1470744000">- Update clean semaphore patch to not close pipe twice and to
  shutdown NSS database (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-5" date="1470830400">- Update clean semaphore patch to not free the pinList twice.
  (#1364560)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-6" date="1474459200">- Check the NSS certificate database directory for read permissions
  by the Apache user. (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-7" date="1474459201">- Add the permission patch to the repository (#1312583)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-8" date="1487851200">- Fail start start when there are invalid Protocols defined (#1389114)
- Handle group membership when testing NSS database filesystem
  permissions (#1395300)
- Add OCSP cache tuning directives (#1392582) 
- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-9" date="1494417600">- Update nss_pcache.8 to drop directory and prefix options (#1382102)

- Don't share mod_nss NSS database with nss_pcache (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10" date="1494417601">- Apply the nss_pcache man page patch (#1382102)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 1.0.14-10.1" date="1500465600">- TLS session cache was not working (#1479766)</changelog>
</package>
<package pkgid="1c8aea7271adb66513b9621acea90a5d8f8956ad72befa1399ae1ca7cb076413" name="motif-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="e568404e774335135b00b0ba78c8672e90b8ed436bbdffa83e511a45b52bacc6" name="motif-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="10.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-1" date="1351166400">- new version 2.3.4 with LGPL license
- fixed some rpmlint warnings
- new sub package for static libraries
- added /etc/X11/mwm directory
- removed defattrs</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-2" date="1351252800">- fixed requirements according to review (RHBZ#870049)
- flex-static has been renamed to flex-devel with Fedora-18 and RHEL-7</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252801">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
</package>
<package pkgid="59c8091f0a5039cf5d285f38062abf88cd998e9c864d2be1ac1c549f4422bfe9" name="motif-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="338a5f4e030ce872bfbe0dcb5817f8ec3e9fd8c9bf2dbdf2080e998ac69d8d49" name="motif-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="12.el7_4"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 2.3.4-3" date="1351252800">- do not use _isa for build requires</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.3.4-4" date="1358769600">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1513771200">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1508769</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1513771201">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1519244</changelog>
</package>
<package pkgid="949630594ef85ebc31949361ee2882bd5af6235669d87be994c34e8080199cb0" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="5b830591d6e7a2bc33764554b8277b0f77f787fe9fdba25f7f22a1bda72b23fa" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="12.el7_4"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-4" date="1489492800">- Don't segfault on early exit
- Resolves: #1369073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.3-5" date="1489579200">- Swizzle BGRA buffers to avoid pixel conversions
- Resolves: #1387025</changelog>
  <changelog author="Owen Taylor &lt;otaylor@redhat.com&gt; - 3.22.3-6" date="1489665600">- Add back quad-buffer stereo patches, rebased to 3.22
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.22.3-6" date="1489752000">- Recreate build files after modifying templates with the last patch
- Resolves: #1387025</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-7" date="1493380800">- Fix cally translation of screen coordinates
- Resolves: #1439194</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-8" date="1494936000">- Special-case shaped java windows to fix OpenJDK's compliance test
- Resolves: #1363784</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-9" date="1496923200">- Fix crash when a window closes during Alt+Tab
- Resolves: #1438722</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-10" date="1497441600">- Keep OR windows stacked on top
- Resolves: #1437203</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.24.3-11" date="1498478400">- Prevent crash when removing workspace with on-all-workspaces windows
  present (like desktop icons)
- Resolves: #1453065</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.3-12" date="1507636800">- Add support for plain old X device configuration
- Resolves: #1515138</changelog>
</package>
<package pkgid="701cebef552fdc6ba9d78b9e281a8a5ceb947b68299d0ceb40ca52f4a1d07106" name="nautilus-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="3c46e49339ed7e27b545a1265360dc77166d8420c70f46d25d668e2fb756eabd" name="nautilus-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.3" rel="4.el7_4"/>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-7" date="1444132800">- Backport two patches from upstream and remove a wrong patch
  Resolves: #1254161 #1266477</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-8" date="1461844800">- Backport fix for jp2 images crashing nautilus
- Apply downstream translations
  Resolves: #1271297 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-9" date="1467374400">- Apply downstream translations
- Restrict icons on desktop to the primary monitor
  Resolves: #1207646 #1046876 #1272881</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-10" date="1468324800">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-11" date="1469016000">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.14.3-12" date="1469016001">- Update icons on primary patch
 Resolves: #1353613</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; 3.22.3-1" date="1488974400">- Update to 3.22.3
- Resolves: #1387026</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-2" date="1495022400">- Fix translation files for the remove-autoar patch
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-3" date="1496059200">- Add Japanese translation
 Resolves: #1382632</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; 3.22.3-4" date="1509624000">- Fix desktop files security issue (upstream bugzilla.gnome.org/777991)
 Resolves: #1490949</changelog>
</package>
<package pkgid="41c3ff4e6c7adfdfa51d2fc8dbbb12993ea24a82cc235b5a35eaa66afdbd34fc" name="ncurses-debuginfo" arch="i686">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="6cfea0b10e54d398126fe6cfd00252b75ebb6692cd1ec0f39d38c2fa1952a89b" name="ncurses-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.9" rel="14.20130511.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.9-5.20120204" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-6.20121013" date="1350302400">- update to 20121013
- move st entries to -base
- remove obsolete macros</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-7.20121017" date="1350561600">- update to 20121017</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-8.20130126" date="1359547200">- update to 20130126
- clear scrollback buffer in clear (#815790)
- make -base and -term subpackages noarch
- make some dependencies arch-specific</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-9.20130316" date="1363608000">- update to 20130316
- include shared ncurses C++ libraries (#911540)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-10.20130413" date="1366027200">- update to 20130413</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-11.20130511" date="1368446400">- update to 20130511</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-12.20130511" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.9-13.20130511" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 5.9-14.20130511" date="1502798400">- fix crash in libtinfo initialization (#1426215)</changelog>
</package>
<package pkgid="4aa2105ec7f1c08bd32dbcea9158908df33150e40abf088d2c9897c4244c1f70" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="58a3af076d4e701c532726c2b211cc5adc952fd119b0de5aeea0f43178cb3e24" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="28.el7_4.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-21" date="1434456000">- Fixed crash on reloading 'exec' configuration options (#1228893)
- Fixed CVE-2014-3565, snmptrapd died when parsing certain traps (#1209361)
- Fixed storageUseNFS functionality in hrStorageTable (#1193006)
- Fixed forwarding of traps with RequestID=0 in snmptrapd (#1192511)
- Fixed hrStorageTable to contain 31 bits integers (#1192221)
- Fixed 'clientaddr' option for UDPv6 client messages (#1190679)
- Fixed log level of SMUX messages (#1189393)
- Fixed UDP-MIB::udpTable index on big-endian platforms (#1184433)
- Fixed client utilities reporting 'read_config_store open failure on
  /var/lib/net-snmp/snmpapp.conf' (#1151310)
- Fixed snmpd crash when failed to parse SMUX message headers (#1140236)
- Added 'diskio' option to snmpd.conf, it's possible to monitor only
  selected devices in diskIOTable (#1092308)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-22" date="1435665600">- Fixed IP-MIB::ipSystemStatsInOctets and similar counters for IPv4
  (#1235697)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-23" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248414)
- Fixed HOST-RESOURCES-MIB::hrFSAccess flag when read-only filesystem
  becomes writable (#1241897)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24" date="1439899200">- Fixed lmSensorsTable not reporting sensors with duplicate names
  (#1252053)
- Fixed close() overhead of extend commands (#1252048)
- Fixed out-of-bounds write in python code (#1252034)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.7.2-24.1" date="1458302400">- Fixed memory leak in ETHERLIKE-MIB (#1305933)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-25" date="1484568000">- Fixed message buffer size (#1286693)
- Fixed problem with snmp too long error message (#1324306)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1:5.7.2-28.1" date="1513166400">- Resolves: #1525421 - fix strstr() crash</changelog>
</package>
<package pkgid="0f1c0782db09533c76a1d986a3ec34ba7f058d3d326a4ce09aafb7f97cf1167a" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
</package>
<package pkgid="df12a22d71e42d68e59944577ac830b81c9b73cf6e63efa7d76fd910590e644b" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
</package>
<package pkgid="6f3c6a7b36c3ac9f9b827eae30ab8d4acb6dda7f5be5c47790dee1aa14090073" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4.3"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.1" date="1512043200">- mount: handle EACCES during version negotiation (bz 1518718)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.2" date="1519300800">- mount: Fix problems with parsing minorversion= (bz 1547681)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4.3" date="1521028800">- mount: move handling of "-t nfs4" into nfs_nfs_version() (bz 1551927)</changelog>
</package>
<package pkgid="782d72da3d5f3cc526486d5f7b1a7a939ac62818fbf0bb3189a8ad219afcb737" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.48.el7_4"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.40" date="1491652800">- gssd: ensure that preferred_realm is non-NULL (bz 1432643)
- mountstats: handle KeyError in accumulate_iostats() (bz 1400106)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1404121)
- sm-notify: ending the grace period early should be configurable (bz 1424599)
- Fixed a couple typos that effected the '--mounts' nfsstat option (bz 1425956)
- Manual page bug: two inaccuracies in nfsd(7) (bz 1432750)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.41" date="1493294400">- nfsdcltrack: silence some expected errors (bz 1443176)
- Conditionally restart gssproxy now that config file is installed (bz 1440887)
- systemd: NFS server services should use network-online (bz 1409012)
- Cleaned up some fuzzy patches (bz 1409012)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.42" date="1494331200">- Removed RPCSVCGSSDARGS nfs.sysconfig (bz 1431218)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.43" date="1495454400">- mount: explicit v4 mounts should not roll back to v3 (bz 1447849)
- spec: Use reload-or-try-restart to restart gssproxy (bz 1440887)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.44" date="1496318400">- Updated patch for bz 1447849 with the upstream version (bz 1447849)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.45" date="1496836800">- Restart gssproxy when the server is reloaded (bz 1459483)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.46" date="1497268800">- Use v4 minor default on all v4 mount types (bz 1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.47" date="1497441600">- mount.nfs: Restore errno after v3 mounts on ECONNREFUSED errors (bz 1404121)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48" date="1497873600">- exportfs: fix path comparison in unexportfs_parsed() (bz 1389046)
- Correctly set the minor version when set in nfsmount.conf (1458504)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.48_4" date="1507291200">- rpc.nfsd: Do not fail when all address families are not support (bz 1450528)</changelog>
</package>
<package pkgid="989bdcc9e8f2d31da6e1eaa93b12d9525e63c79e2ea62161107868762ef6d1c6" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="890827a754aa18224ddd64194d3a9dd9cfad1eee57ee7222ef59d05616ae4c8d" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="12.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1493208000">- Reorder ChaCha20-Poly1305 cipher suites, as suggested in:
  https://bugzilla.redhat.com/show_bug.cgi?id=1373158#c9</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1493294400">- Correctly set policy file location when building</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-5" date="1493380800">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="42f1aba9251ecf5cc0629377cd3038cb53124192d116ea14e40662140b42d5f5" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="be7036ee5f808b9b82916f80a2585fd55f7e42e561f24a710fac7894566a8853" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.4" rel="15.el7_4"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-6" date="1493812800">- Update nss-alert-handler.patch with the upstream fix from mozbz#1360207.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-7" date="1493985600">- Update nss-pk12util.patch to include fix from mozbz#1353724.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-8" date="1493985601">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-9" date="1496404800">- Fix typo in nss-sni-c-v-fix.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-10" date="1499947200">- Work around yum crash due to new NSPR symbol being used in nss-sysinit,
  patch by Kai Engert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-11" date="1500033600">- Rebuild to get correct release suffix (.el7 -&gt; .el7_4)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-12" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-13" date="1505908800">- Add backward compatibility to pk12util regarding password encoding</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-14" date="1505995200">- Update iquote.patch to prefer nss.h from the source</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-15" date="1506513600">- Add backward compatibility to pk12util regarding faulty PBES2 AES encryption</changelog>
</package>
<package pkgid="b0fbf1b5c9acafffe3a02f625fa872f7be4200a04330548df01114c047fd1089" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="6f393b0a205866025ca980103eb084963307944bba8b900a3f2bb394cd9f74fa" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="8.el7_4"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.2" date="1460721600">- Adjust for a renamed variable in newer nss-util, require a compatible nss-util version.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-14.3" date="1461153600">- Fix a flaw in %check for nss not building on arm
- Resolves: Bug 1200856</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.16.2.3-14.4" date="1467115200">- escape all percent characters in all changelog comments</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488801600">- Update to NSS 3.28.3
- Remove upstreamed patches for the previous FIPS validation
- Package lowkeyi.h and lowkeyti.h in freebl-devel
- Pick up a patch in the Fedora package to fix build issue</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1488888000">- Fix RSA-PSS corner case when the modulus is not of size multiple of 8</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-4" date="1490270400">- include new PKCS12 NSS specific mechanisms.
- alias CKM_TLS_KDF to CKM_TLS_MAC to preserve ABI
- add RSA PSS oid to decrypting PKCS #5 key blobs.
- move ec public key check from softokn to freebl so apps like Java can benefit.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-5" date="1495022400">- fix login handling for FIPS slots, patch from rhbz#1390154
- backport upstream fix for CVE-2017-5462 (DRBG leak)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-6" date="1495800000">- restore nss-softokn-3.16-add_encrypt_derive.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-7" date="1501675200">- let nss-softokn-freebl depend on recent version of nspr (rhbz#1477308),
  patch by Kyle Walker</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.28.3-8" date="1501761600">- fix fips post so that they actually run at startup</changelog>
</package>
<package pkgid="ef3ff7613f2ab9291bb5fd8008fe1eb44081ccd44b2a90b6c6715a1fe9f83639" name="nuxwdog-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="7303bd4dcfec69126b7e70e6526227cdc3fe52ae65f2b7c3e1866ceb70435b57" name="nuxwdog-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="5.1.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-9" date="1407931200">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; - 1.0.1-10" date="1412078400">- Resolves: rhbz#1117072 -  ppc64le is missing from ExcludeArch
- reverted the previous change.  ppc64le now removed from ExcludeArch</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.2-1" date="1429704000">- Allow passwords to be retrieved post-init phase
- Fix null termination issue on returned stored passwords</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-1" date="1431259200">- Add systemd support</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-2" date="1434542400">- Resolves: rhbz#1229817 - Re-enable builds for ppc64/ppc64le/s390x</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-4" date="1447848000">- Resolves: rhbz#1283338 - Use java-headless instead</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5" date="1466769600">- Resolves: rhbz#1283272 - Move perl bindings to a subpackage</changelog>
  <changelog author="Ade Lee &lt;alee@redhat.com&gt; 1.0.3-5.1" date="1518523200">- Resolves: rhbz#1503753 - nuxwdog is cutting off long ExeArgs
- Resolves: rhbz#1534030 - add option to set process uid</changelog>
</package>
<package pkgid="7e50c1d5bf7d3b870028622a2b1c4cda198d4299315790f9c848b744463f16e6" name="oci-register-machine-debuginfo" arch="x86_64">
  <version epoch="1" ver="0" rel="3.11.1.gitdd0daef.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.6.git31bbcd2" date="1468324800">- build with golang &gt;= 1.6.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.7.git31bbcd2" date="1468324801">- remove obsoletes</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.8.gitaf6c129" date="1472126400">- Resolves: #1370289 - ship config file to enable/disable
oci-register-machine
- built commit af6c129</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
</package>
<package pkgid="86b4663f80c1fb55d11c9f7da41ad371c2ab9368b783f62bf15601fbee9aea8e" name="oci-register-machine-debuginfo" arch="x86_64">
  <version epoch="1" ver="0" rel="3.13.gitcd1e331.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.8.gitaf6c129" date="1472126400">- Resolves: #1370289 - ship config file to enable/disable
oci-register-machine
- built commit af6c129</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
</package>
<package pkgid="1759163d4b8978c7f845381a6eefdd6bbe1b6dbfbc817b6fd093da84c23b6eb9" name="oci-register-machine-debuginfo" arch="x86_64">
  <version epoch="1" ver="0" rel="3.14.gitcd1e331.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.9.gitaf6c129" date="1472558400">- bump release tag for extras-rhel-7.3</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.10.gitfcdbff0" date="1476792000">- Resolves: #1386320
- built commit fcdbff0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.14.gitcd1e331" date="1511352000">- Resolves: #1514511</changelog>
</package>
<package pkgid="ede64bd6c830e86752d10b6498c0a823b22500849ef3f057cfbe3847762713cf" name="oci-register-machine-debuginfo" arch="x86_64">
  <version epoch="1" ver="0" rel="6.git2b44233.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-1.11.gitdd0daef" date="1481716800">- Resolves: #1404397 - rebase to latest upstream
- built commit dd0daef</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.8.gitbb20b00" date="1489492800">- Re-add epoch for RHEL.</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 1:0-3.9.gitbb20b00" date="1489492801">- Build on all available arches</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.11.gitdd0daef" date="1490011200">- rebase to dd0daef</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.11.1.gitdd0daef" date="1490616000">- rebuild for all arches on 7.4</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.12.gitcbf1b8f" date="1501070400">- Resolves: #1462296
- built commit cbf1b8f</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0-3.13.gitcd1e331" date="1505995200">- rebased to cd1e331b78273c9b87d737f46f8d0917b72c546d</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-3.14.gitcd1e331" date="1511352000">- Resolves: #1514511</changelog>
  <changelog author="Daniel Walsh &lt;dwalsh@redhat.com&gt; - 0-5.13.git" date="1515067200">- Disable this hook by default.
- Not many people are using it, and it is causing some issues with Docker.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0-6.git2b44233" date="1517486400">- built commit 2b44233</changelog>
</package>
<package pkgid="e3f698cdb1a8c001550bdf93ec06847f0ebb2cd9c5f8d8e2c38e2eb93ccd0cf3" name="oci-systemd-hook-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.12" rel="1.git1e84754.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.4-10.git5db667f" date="1486036800">- oci-systemd-hook: do not fail if /run/secrets does not exist
- Fix compiler -Wall -Wextra issues</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.5-1.git16f7c8a" date="1486555200">- Fix mounting of /var/log/journal inside of the container</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
</package>
<package pkgid="ef7ebc464dd614a97d3d3d627e1929f5a8e4ddd20393164934c6c8e73dd3ec3c" name="oci-systemd-hook-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.14" rel="1.git1ba44c6.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.5-1.git16f7c8a" date="1486555200">- Fix mounting of /var/log/journal inside of the container</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
</package>
<package pkgid="dbf943d179cacc9d3f1476dcb2f8df64d1c6a704b52be8d5e98c29ab24285e1a" name="oci-systemd-hook-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.14" rel="2.git9b1e622.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.6-1.git16f7c8a" date="1488801600">- Reimplement systemd handling.
- Remove docker path from systemdhook</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.7-1.gitfe22236" date="1490788800">- rh-ulrich-o - Patch to allocate configData dynamically</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-2.git9b1e622" date="1512993600">- rebased to 9b1e622c86cf738b404f89ee405803a0338ae9d7</changelog>
</package>
<package pkgid="ea53d02555386f11c13b33bdf69fbf26bfc975cfc64b7d1844726c0723c45a06" name="oci-systemd-hook-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.15" rel="2.gitc04483d.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.8-1.gitd899a8e" date="1496750400">- Fixes for running with user namespace</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-2.rhel74..gitd899a8e" date="1496836800">- modify release tag to clearly indicate rhel74</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-3.1.gite533efa" date="1497441600">- built commit e533efa</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.8-4.1.gite533efa" date="1497441601">- correct date in previous entry</changelog>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 1:0.1.8-5.1.git1e84754" date="1500552000">- rebased to 1e84754af7488331ee0353e6100ee2066defec23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.12-1.git1e84754" date="1502193600">- Resolves: #1479510
- sync version number with configure.ac</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-1.git1ba44c6" date="1505995200">- rebase to 1ba44c624342f601c45097db2abeb4d01f6b3053</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.14-2.git9b1e622" date="1512993600">- rebased to 9b1e622c86cf738b404f89ee405803a0338ae9d7</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1:0.1.15-1.git" date="1513857600">- Fix issue with oci-systemd-hook running in user namespaces
- fix json file to run container with proper stage field.</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.15-2.gitc04483d" date="1517486400">- rebase to c04483d32aaad351da14b3b42dfe1e9e69ffa974</changelog>
</package>
<package pkgid="08b81b2882f2053597bc6f04cf10aeafd4092b0f4eb6eb491a002df489d57878" name="oci-umount-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.0.0" rel="1.git299e781.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
</package>
<package pkgid="d7d4406b9318167967087ad79fe4375a1432831a79659c0d0e28a8e09e7b09c5" name="oci-umount-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.3.0" rel="1.git51e7c50.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.2.0-1.gite3fbbfb" date="1508414400">- rebased to e3fbbfb7e4ce04a256ea8f11858a84faa307b7bd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.0-1.git51e7c50" date="1510056000">- rebase to v2.3.0</changelog>
</package>
<package pkgid="60d95b5ce55541e4eeb4e3008d4e0b83ed8a4b15c3bc2e28d63dce75924dd55c" name="oci-umount-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.3.1" rel="2.gitbf16163.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.0.0-1.git299e781" date="1502712000">- initial build as independent package
- obsoletes docker-oci-umount</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.2.0-1.gite3fbbfb" date="1508414400">- rebased to e3fbbfb7e4ce04a256ea8f11858a84faa307b7bd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.0-1.git51e7c50" date="1510056000">- rebase to v2.3.0</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.3.1-2.gitbf16163" date="1512993600">- rebased to 2.3.1</changelog>
</package>
<package pkgid="eebe6de08becea2a66b4ef98a04504f103881e2156d0de4de95fb33b8e697317" name="oci-umount-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.3.3" rel="3.gite3c9055.el7"/>
  <changelog author="fkluknav &lt;fkluknav@redhat.com&gt; - 2:1.13-102.git7623f6a" date="1500552000">- fixes according to package review</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:1.13-103.git7623f6a" date="1501156800">- obsolete with epoch</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 2:2.0.0-2.gitf90b64c" date="1502971200">- rebased to f90b64c144ff1a126f7c57b32396e8990ca696fd</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:2.2.0-1.git0a4dcd6" date="1505995200">- bump to v2.2.0</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.2.0-2.git0a4dcd6" date="1505995201">* Thu Sep 21 2017 Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.2.0-2.git0a4dcd6
- Add support for multiple configuration files.
  oci-umount will still read config file /etc/oci-umount.conf if it
  exists, but will also read config files in /usr/share/oci-umount/oci-umount.d
  and config files in /etc/oci-umount/oci-umount.d.  If the same file name exists
  in both directories, then oci-umount will only use the content in /ect/oci-umount/oci-umount.d.
- Make Logs less noisy
- Improve logs output, adding containier id, and needed file information
- Add support for specifying submounts PATH/* will unmount all mountpoints 
  under PATH in a container
- Support for oci configuration files to specify when to run the plugin</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.1-1.git51e7c505" date="1510056000">-  Provide a knob log_level to control verbosity of messages</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.2-1.git" date="1513857600">- Fix oci-umount.json to run in stages to support CRI-O</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 2:2.3.3-1.git" date="1516622400">- Support passing of stage via stage environment variable.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.3-2.gite3c9055" date="1517486400">- correct Obsoletes that were messed up probably cause of reusing fedora spec</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 2:2.3.3-3.gite3c9055" date="1517486401">- provides: docker-oci-umount = epoch:version-release</changelog>
</package>
<package pkgid="18328163565f979e66f1a71035c79bd0e35e52f5b1b016fb02c429cc4ebd2390" name="openscap-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="9fda41a6f57e2a68e44e7dece2f258ed53fdcca1cea37360732eee2bd261b744" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="3.el7_4"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-4" date="1464696000">- worked around a change in behavior in argparse between different versions of python2 (#1278147)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.9-7" date="1464696001">- fixed dates in the changelog
- changed Release to 7 to avoid conflicts</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-1" date="1467288000">- upgrade to the latest upstream release</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.10-2" date="1473076800">- fix oscap-docker to follow the proxy settings (#1351952)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.11-1" date="1479124800">- upgrade to the latest upstream release</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.12-1" date="1479297600">- Upgrade to the latest upstream release
- improved HTML report by referencing links
- fixed validity errors in ARF files
- fixed CVE parsing
- fixed injecting xccdf:check-content-ref references in ARF results
- fixed oscap-docker incompliance reporting (#1387248)
- fixed oscap-docker man page (#1387166)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.13-1" date="1483617600">- Upgrade to the latest upstream release
- Added --thin-results CLI override to oscap xccdf eval
- Added --without-syschar CLI override to oscap xccdf eval
- Remediations are not filtered by applicability
- Fixed segmentation faults in XCCDF and OVAL processing
- Added a warning on generating an ARF from XCCDF 1.1</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.14-1" date="1490097600">- Upgrade to the latest upstream release
- Detailed information about ARF files in 'oscap info'
- Generating remediation scripts from ARF
- HTML report UX improvements
- Fixed CPE dictionary to identify RHEVH as RHEL7 (#1420038)
- Fixed systemd probes crashes inside containers (#1431186)
- Fixed output on terminals with white background (#1365911)
- Error handling in oscap-vm (#1391754)
- Fixed SCE stderr stalling (#1420811)
- Fixed absolute filepath parsing in OVAL (#1312831, #1312824)
- Fixed segmentation faults in RPM probes (#1414303, #1414312)
- Fixed missing header in result-oriented Ansible remediations</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.14-3" date="1519214400">- Use checklist ID instead of hardcoded value to get HTML guide (#1545584)</changelog>
</package>
<package pkgid="ad46fae451b7bb23cdaec91b028e4611b545205571c45b0e14a820fcdd06e392" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="ce5b04a87cb8811435aaa2c1cc88b8f57c772877cdcc2c920159788ac74d0b9a" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="12.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-2 + 0.10.3-1" date="1490270400">- Fix coverity scan results
- Adjust FIPS algorithms list (#1420910)
- Revert problematic feature for chroot(#1418062)
- Fix CBC weakness in released OpenSSH 7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
</package>
<package pkgid="e2422ab0b12605376356480caaaccdd7ee175259ea2888adf408d66c3bf35d75" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="b79cfab98467c33dd0cc648d8457a45656a707d7726905690ce3f9aa1e8c38c1" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="13.el7_4"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-3 + 0.10.3-1" date="1491393600">- Do not completely disable SHA-1 key exchange methods in FIPS (#1324493)
- Remove wrong coverity patches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-4 + 0.10.3-1" date="1493035200">- Update seccomp filter to work on ppc64le (#1443916)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-5 + 0.10.3-1" date="1493208000">- Fix the default key exchange proposal in FIPS mode (#1438414)
- Remove another wrong coverity chunk to unbreak gsskex (#1438414)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-6 + 0.10.3-1" date="1493899200">- ControlPath too long should not be a fatal error (#1447561)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-8 + 0.10.3-1" date="1494849600">- Fix multilib issue in documentation (#1450361)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-9 + 0.10.3-1" date="1495195200">- Allow harmless syscalls for s390 crypto modules (#1451809)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-10 + 0.10.3-1" date="1495454400">- Add missing messages in FIPS mode (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-11 + 0.10.3-1" date="1495454401">- Compiler warnings (#1341754)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-12 + 0.10.3-1" date="1502107200">- Revert upstream change to UseDNS=no back to yes (#1478175)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
</package>
<package pkgid="dfcb7c76fffacdc481e3492bc277aa448857f4ede7704fa57fa9b15fbee928d4" name="ostree-debuginfo" arch="x86_64">
  <version epoch="0" ver="2017.11" rel="1.el7"/>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.3-2" date="1490788800">- Backport fix for ovl selinux labeling
  Resolves: #1436751</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt;" date="1491480000">- Patch spec to get non-grub archs working again
  Resolves: #1439395</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
</package>
<package pkgid="15a56dea260da04594cdcba28176e176c69e619c02bfc3adb6f22a7b724a1224" name="ostree-debuginfo" arch="x86_64">
  <version epoch="0" ver="2017.14" rel="2.el7"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.3-3" date="1491998400">- Rebuild for 7.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-1" date="1493640000">- New release
  Resolves: #1447077</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.5-2" date="1494244800">- Rebuild for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.6-2" date="1495454400">- New upstream version</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.6-3" date="1496750400">- Add versioned runtime req on glib2 (RHBZ#1371704)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2017.7-1" date="1497873600">- New upstream version for 7.4</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 2017.10-2" date="1503316800">- Switch to libcurl
  Resolves: #1444903</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.11-1" date="1506340800">- New upstream version for 7.4.2</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-1" date="1512475200">- New upstream version for 7.4.4</changelog>
  <changelog author="Jonathan Lebon &lt;jlebon@redhat.com&gt; - 2017.14-2" date="1512475201">- Rebuild for 7.4</changelog>
</package>
<package pkgid="5c1a890727db966f3e4b0929ef8df7f2e0d16692d8e00072dc357434fb819109" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="5cf2fb7981927529287b411ad132a2d2f1f98113cef56cac1dfef4adb424b665" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-5" date="1491307200">- Keep man pages compressed
- Bugfixes for container bundles
- Resolves: rhbz#1410886
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-6" date="1491393600">- Allow container without IP to use underlying hostname
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
</package>
<package pkgid="47f083872e209261a5e00185c421f1b3eef8a052d97d80bfdf1a87359e26d0f6" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="6dc2aa0809fde7a2cdf42aa484a0d84e0ff3e1552aa3ae95877ff19b733c2e01" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.4"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-7" date="1492516800">- Avoid fencing old DC if it is shutting down while another node is joining
- Improve crmd's handling of repeated fencing failures
- Correct behavior when guest created by bundle has a node attribute
- Show Red Hat bugzilla URL rather than upstream when generating cluster report
- Resolves: rhbz#1430112
- Resolves: rhbz#1432722</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516801">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
</package>
<package pkgid="8de90d81007c62d614f02099136112c69e806fb8225bf062da4d00261b25c0f9" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="cbf7c911224154cb4219dc256b914330b04f892ef9ac58ba77bb2019710fc094" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.5"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-8" date="1492516800">- Fix shell script syntax error introduced with URL patch
- Resolves: rhbz#1410886</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-9" date="1494331200">- Allow cleanup of guest nodes when guest is unmanaged
- Allow bundles to run on Pacemaker Remote nodes
- Handle slow IPC clients better
- Update crmd throttle information when CPUs are hot-plugged in
- Order pacemaker systemd unit after resource-agents-deps target
- Resolves: rhbz#1303742
- Resolves: rhbz#1432722
- Resolves: rhbz#1435067
- Resolves: rhbz#1444728
- Resolves: rhbz#1446669</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
</package>
<package pkgid="e23d9065100f33c8aaf1a02b51ab113052f19839aa1ce6aec9e8af4f339266b9" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="e21792edeff35bef19992c6bb7563aea357ac1c37694689cf49e4f76d86acd43" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.7"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-10" date="1495540800">- Fix issues when running bundles on Pacemaker Remote nodes
- Reap orphaned processes when running Pacemaker Remote as pid 1
- Order remote actions after remote connection recovery
  (fixes regression in RHEL 7.3)
- Avoid local resource manager daemon (lrmd) crash when an
  in-flight systemd operation is cancelled
- Resolves: rhbz#1432722
- Resolves: rhbz#1441603
- Resolves: rhbz#1448772
- Resolves: rhbz#1451170</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
</package>
<package pkgid="ce69a168f6b6c168e9550484e5fbf8d3e083379c9ec9a8860251b015cb1036f6" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="a261da1a5e938537012b38629722ddc656cee805a546fa936213b73b5260303b" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="12.el7_4.8"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-11" date="1497009600">- Support bundle meta-attributes
- Resolves: rhbz#1447903</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12" date="1497960000">- Avoid unnecessary restarts when recovering remote connections
- Resolves: rhbz#1448773</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.1" date="1502798400">- Add cluster-ipc-limit option to avoid CIB eviction in large clusters
- Implement ordering constraints involving bundles
- Always re-check resource placement after quorum loss
- Avoid stonithd crash when disabling fence device with queued actions
- Allow re-enabled fence devices to be used
- Resolves: rhbz#1478298
- Resolves: rhbz#1481139
- Resolves: rhbz#1481140
- Resolves: rhbz#1481141
- Resolves: rhbz#1481142</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.2" date="1503057600">- Allow crm_report to work when no log files are specified
- Resolves: rhbz#1482852</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.3" date="1506945600">- Allow unfencing of remote nodes
- Support clone notifications for bundle resources
- Support colocation constraints involving bundles
- Support container-attribute-target resource meta-attribute
- Resolves: rhbz#1491544
- Resolves: rhbz#1497602</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.4" date="1506945601">- Avoid memory leak when unfencing is needed
- Resolves: rhbz#1491544</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.5" date="1510574400">- Fix multiple issues with bundle resources
- Handle clean-ups of primitive within bundle properly
- Resolves: rhbz#1509871
- Resolves: rhbz#1509874</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.6" date="1513771200">- Fix unfencing regression
- Prevent invalid transition with bundles
- Resolves: rhbz#1524828
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.7" date="1514894400">- Fix use-of-NULL memory issues
- Resolves: rhbz#1527810</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.16-12.8" date="1516795200">- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1520798
- Resolves: rhbz#1537557</changelog>
</package>
<package pkgid="c8fb249d2e9e9c28ddbd6b11aefe2e4b0c81856a47d806e9f97ca8a8df252d59" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.158" rel="6.el7_4.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-1" date="1486728000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1409821 rhbz#1404233 rhbz#1408476 rhbz#1262001 rhbz#1389443 rhbz#1389941 rhbz#1315992 rhbz#1261116 rhbz#1389501 rhbz#1404229 rhbz#1284404 rhbz#1339355 rhbz#1347335 rhbz#1344712 rhbz#1395226 rhbz#1382004 rhbz#1378107 rhbz#1398562 rhbz#1402475 rhbz#1382597 rhbz#1389453 rhbz#1390071 rhbz#1390066 rhbz#1387670 rhbz#1292858 rhbz#1396462 rhbz#1419903 rhbz#1419661</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.156-2" date="1488283200">- Added ppc64le architecture
- Resolves: rhbz#1402573</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.157-1" date="1491825600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1362493 rhbz#1315627 rhbz#1378742 rhbz#1334429 rhbz#1402374 rhbz#1389941 rhbz#1303969 rhbz#1415080 rhbz#1328882 rhbz#1434972 rhbz#1413958</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-1" date="1495540800">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1447702 rhbz#1176018 rhbz#1433016 rhbz#1303969 rhbz#1386114 rhbz#1386512 rhbz#1390609 rhbz#1165821 rhbz#1315992 rhbz#1373614 rhbz#1422667 rhbz#1254984</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.158-2" date="1495800000">- Fixed crash of the `pcs cluster setup` command when the `--force` flag was used
- Fixed crash of the `pcs cluster destroy --all` command when the cluster was not running
- Fixed crash of the `pcs config restore` command when restoring pacemaker authkey
- Fixed "Error: unable to get cib" when adding a node to a stopped cluster
- Resolves: rhbz#1176018</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-3" date="1496232000">- Added option to create not hardened cluster with the `pcs cluster setup` command using the `--no-hardened` flag
- Added option to create not hardened cluster from web UI
- Fixed a crash in the `pcs cluster node add-remote` command when an id conflict occurs
- Fixed creating a new cluster from the web UI
- `pcs cluster node add-guest` now works with the flag `--skipp-offline`
- `pcs cluster node remove-guest` can be run again when the guest node was unreachable first time
- Fixed "Error: Unable to read /etc/corosync/corosync.conf" when running `pcs resource create`([rhbz#1386114])
- Binary data are stored in corosync authkey
- Resolves: rhbz#1284404 rhbz#1373614 rhbz#1165821 rhbz#1176018 rhbz#1386114</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-4" date="1496750400">- Added support for enable and disable in bundles
- New clusters are created with corosync encryption disabled by default
- Flag `--master` is backward compatible in `pcs resource create`
- Resolves: rhbz#1165821 rhbz#1433016 rhbz#1458153</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6.el7_4.1" date="1509364800">- `resurce update` no longer exits with an error when the `remote-node` meta attribute is set to the same value that it already has
- Resolves: rhbz#1507399</changelog>
</package>
<package pkgid="6ebb582256bb195f7127a26e54ce4638d1a30b092bb4553c754929887e9c1e06" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="4b9d18a2a74bae90471f1d0efe3d5f5336be989c36df09af431b53f35edcff69" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="8c5f5cccb915f9b5d1917014e3365d1cf3ff52d8d9c534f5d5b9d0eae9018f0e" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="35444a0f55f13f7d44577fc15fd402427dae50c78706f57fe3d579eca684ed1c" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="6891a0f88f73483e42cdc5dcec008b44f240386b02afc4623531c014d3b77981" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="5e5be4b86402ef82990a18920cd99a6c62d944c97edce6655697c552d8f6a6d0" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="e70f4537dce49e29767cb1b75ba256c65ba2f8353c938001515a8d98e143cac5" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="667ef881a95b81178bad3ac4ebebe6aaaab7d97cd003c5c987ecfd1b467f8a2e" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="c76247dac4f961385462985782e0dfd02d1133265de4bf928260c2473be37cb4" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4.1"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43.1" date="1516708800">- gd: fix buffer over-read into uninitialized memory CVE-2017-7890</changelog>
</package>
<package pkgid="d43226c5d790a5bb8adf847ec0e6caa9e87ee423ce7f736164c80b19cbf2b9e6" name="php-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.16" rel="43.el7_4"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-34" date="1429185600">- fix memory corruption in fileinfo module on big endian
  machines #1082624
- fix segfault in pdo_odbc on x86_64 #1159892
- fix segfault in gmp allocator #1154760</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-35" date="1433505600">- core: fix multipart/form-data request can use excessive
  amount of CPU usage CVE-2015-4024
- fix various functions accept paths with NUL character
  CVE-2015-4025, CVE-2015-4026, #1213407
- fileinfo: fix denial of service when processing a crafted
  file #1213442
- ftp: fix integer overflow leading to heap overflow when
  reading FTP file listing CVE-2015-4022
- phar: fix buffer over-read in metadata parsing CVE-2015-2783
- phar: invalid pointer free() in phar_tar_process_metadata()
  CVE-2015-3307
- phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
- phar: fix memory corruption in phar_parse_tarfile caused by
  empty entry file name CVE-2015-4021
- soap: fix type confusion through unserialize #1222538
- apache2handler: fix pipelined request executed in deinitialized
  interpreter under httpd 2.4 CVE-2015-3330</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-36" date="1433937600">- fix more functions accept paths with NUL character #1213407</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-37" date="1459771200">- session: fix segfault in session with rfc1867 #1297179</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-38" date="1464609600">- curl: add options to enable TLS #1291667
- mysqli: fix segfault in mysqli_stmt::bind_result() when
  link is closed #1096800
- fpm: fix incorrectly defined SCRIPT_NAME variable when
  using Apache #1138563
- core: fix segfault when a zend_extension is loaded twice #1289457
- openssl: change default_md algo from MD5 to SHA1 #1073388
- wddx: fix segfault in php_wddx_serialize_var #1131979</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-39" date="1465992000">- fix segmentation fault in header_register_callback #1344578</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-40" date="1469188800">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-41" date="1470052800">- gd: fix integer overflow in _gd2GetHeader() resulting in
  heap overflow CVE-2016-5766
- gd: fix integer overflow in gdImagePaletteToTrueColor()
  resulting in heap overflow CVE-2016-5767
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec
  CVE-2016-5768</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-42" date="1470398400">- bz2: fix improper error handling in bzread() CVE-2016-5399</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.4.16-43" date="1507118400">- gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
- gd: Signed Integer Overflow gd_io.c CVE-2016-10168</changelog>
</package>
<package pkgid="c31239f137b4a5b7d51ee515dd07afbb9c3f42e6de7daee0688b2ba79c13f44a" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="13.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-4" date="1494331200">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1386303 - cannot extract generated private key from KRA when
  HSM is used. (alee)
- Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
- Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from
  the KRA (ftweedal)
- Bugzilla Bug #1448204 - pkispawn of clone install fails with
  InvalidBERException (ftweedal)
- Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on
  thales hsm (alee)
- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-5" date="1495454400">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
- Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed)
  CMC with identity proof (cfu)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (mharmsen)
- Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when
  defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata)
- Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne)
- Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen)
- Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in
  ConnectorServlet. (edewata)
- Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata)
- Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED
  audit event. (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-6" date="1495540800">- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error
  (mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-7" date="1496145600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1445519 - CA Server installation with HSM fails
  (jmagne)
- Bugzilla Bug #1452617 - Unable to create IPA Sub CA
  (ftweedal)
- Bugzilla Bug #1454471 - Enabling all subsystems on startup
  (edewata)
- Bugzilla Bug #1455617 - Key recovery on token fails because
  key record is not marked encrypted (alee)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
</package>
<package pkgid="580588c3b48b42e1435de9893938fbb05284fccc501a00fbdcfc4e36610ee48c" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.4.1" rel="17.el7_4"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-8" date="1496664000">- Require "selinux-policy-targeted &gt;= 3.13.1-159" as a runtime requirement
- Require "tomcatjss &gt;= 7.2.1-4" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS
  enabled system (edewata)
- Bugzilla Bug #1447144 - CA brought down during separate KRA instance
  creation (edewata)
- Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure
  ACCESS_SESSION_ESTABLISH_FAILURE (edewata)
- Bugzilla Bug #1454450 - SubCA installation failure with 2 step
  installation in fips enabled mode (edewata)
- Bugzilla Bug #1456597 - Certificate import using pki client-cert-import
  is asking for password when already provided (edewata)
- Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes)
- Bugzilla Bug #1458043 - Key recovery using externalReg fails
  with java null pointer exception on KRA (alee)
- Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter
  (edewata)
- Bugzilla Bug #1458429 - client-cert-import --ca-cert should
  import CA cert with trust bits "CT,C,C" (edewata)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-9" date="1497268800">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret)
  using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne)
- Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC
  non-signing certificate requests (cfu)
- Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC
   revocation non-signing cert requests (cfu)
- Bugzilla Bug #1458047 - change the way aes clients refer to
  aes keysets (alee)
- Bugzilla Bug #1458055 - dont reuse IVs in the CMC code
  (alee)
- Bugzilla Bug #1460028 - In keywrap mode, key recovery on
  KRA with HSM causes KRA to crash (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-10" date="1497873600">- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1458043 - Key recovery on token fails with
  invalid public key error on KRA (alee)
- Bugzilla Bug #1460764 - CC: CMC: check HTTPS client
  authentication cert against CMC signer (cfu)
- Bugzilla Bug #1461533 - Unable to find keys in the p12 file after
  deleting the any of the subsystem certs from it (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-11" date="1500292800">- Resolves: rhbz #1469432
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1469432 - CMC plugin default change
- Resolves CVE-2017-7537
- Fixes BZ #1470948</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-12" date="1500465600">- Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing
  certificate requests (cfu)
  [PREVIOUS PATCH:  pki-core-beta.patch]
  [PREVIOUS PATCH:  pki-core-snapshot-4.patch]
- Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause
  error (cfu)
  [PREVIOUS PATCH:  pki-core-post-beta.patch]
- Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert
  against CMC signer (cfu)
  [PREVIOUS PATCH:  pki-core-CMC-check-HTTPS-client-authentication-cert.patch]
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-validation.patch]
- Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal
  non-signing cert requests (cfu)
  [PREVIOUS PATCH:  pki-core-snapshot-1.patch]
  [pki-core-pre-signed-CMC-renewal-UniqueKeyConstraint.patch]
- Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen)
  [pki-core-platform-dependent-python-import.patch]
- Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with
  id-cmc-statusInfoV2 (cfu)
  [pki-core-CMC-id-cmc-statusInfoV2.patch]
- Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option
  (dmoluguw)
  [pki-core-subsystem-cert-update-CLI-cert-option.patch]
- Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03
  (jmagne)
  [pki-core-HSM-key-changeover-SCP03-support.patch]
- Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system
  certificates (cfu)
  [pki-core-system-cert-CMC-enroll-profile.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-13" date="1503316800">- Resolves: rhbz #1463350
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Bugzilla Bug #1463350 - Access banner validation (edewata)
  [pki-core-server-access-banner-retrieval-validation.patch]</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-14" date="1505217600">- Require "jss &gt;= 4.4.0-8" as a build and runtime requirement
- ##########################################################################
- RHEL 7.4:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332
- Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions)
  [RHEL 7.4.z] (ftweedal)
- Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error
  in cmc user-signed [rhel-7.4.z] (cfu)
- Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from
  RHEL 7.1 [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS)
  [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI Server [rhel-7.4.z] (edewata)
- dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data:
  TypeError: ... is not JSON serializable (ftweedal)
- ##########################################################################
- RHCS 9.2:
- ##########################################################################
- Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271
- Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and
  "tokenType" certificate attribute for recovered certificates. (cfu)
- Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin
  for token certificates on TPS UI (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-15" date="1505736000">- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-16" date="1507896000">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1439228 - externalRegRecover does not support multiple
  - #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of
  - #Bugzilla Bug #1471996 - Certificate Revocation Reasons not being updated
  - ###########################################################################
- ## RHEL 7.4
- ###########################################################################
- Bugzilla Bug #1500499 - Certificate Revocation Reasons not being updated
  in some cases [rhel-7.4.z] (cfu)
- Bugzilla Bug #1502527 - CA cert without Subject Key Identifier causes
  issuance failure [rhel-7.4.z] (ftweedal)
- Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0
  [rhel-7.4.z] (ftweedal)
  NOTE: Check-ins for #1492560 all reference the dogtagpki Pagure Issue
        associated with Bugzilla Bug #1402280 - CA Cloning: Failed to
        update number range in few cases (which is not yet fully resolved)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.4.1-17" date="1510315200">- ###########################################################################
- ## RHCS 9.2
- ###########################################################################
- #Bugzilla Bug #1507160 - TPS new configuration to allow the protocol of</changelog>
</package>
<package pkgid="56e6c79a8b965023b649e7330c5a440a81ae676343c0c25e0165a2d7bd6255b5" name="poppler-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="f7d7c8cf8bd4919182d7bacb60e651fb4a6c3341947b3af0ad8296c800f1ccfd" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="17.el7_4"/>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-8" date="1456920000">- Do not assert on broken document
- Resolves: #1299500</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-9" date="1457352000">- Check for int overflow
- Resolves: #1299496</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-10" date="1457352001">- Check for GfxSeparationColorSpace existance
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-11" date="1457352002">- Repair patch
- Resolves: #1299490</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-12" date="1457438400">- Move array reallocation from visitLine to startLine
- Resolves: #1299481</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-13" date="1457438401">- Check for groupColorSpace existance
- Resolves: #1299479</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-14" date="1457438402">- Show correct glyph or none instead of 'fi'
- Resolves: #1298616</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-15" date="1457524800">- Check array length
- Resolves: #1299506</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.26.5-16" date="1457524801">- Fix crash in Splash
- Resolves: #1299492</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.26.5-17" date="1471521600">- Resolves: rhbz#1482934 CVE-2017-9776</changelog>
</package>
<package pkgid="b198258a63829338258ae1a1f044165ab01750fdc885c6cb3c41e182a55163f6" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="57a2c58cbedc03ff196d2ebdbf6017c56109c52c94044c0d13c44babe949a6c7" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="1.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.12-1" date="1433332800">- update to 9.2.12 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-12.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.13-1" date="1434024000">- update to 9.2.13 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-13.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
</package>
<package pkgid="1e1502e6a9faf43668e5d56d96fd29de8ad40f46a8ac31f22540116b309125d9" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="6288708856fcc03e42b29f418bc231f2484aa18a21fa45d85ef75ad54ae32d13" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.23" rel="3.el7_4"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.14-1" date="1445342400">- update to 9.2.14 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-14.html</changelog>
  <changelog author="Pavel Kajaba &lt;pkajaba@redhat.com&gt; - 9.2.15-1" date="1455278400">- update to 9.2.15 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-15.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.15-2" date="1467288000">- fix postgresql-setup to work if postgres user is set to /bin/nologin (#1122143)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.18-1" date="1471435200">- update to 9.2.18 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-16.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.18-2" date="1487764800">- package libpgport.a (rhbz#1305979)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
</package>
<package pkgid="a39d2a911cf84ae9de28bbf5cf61a1bcdf79fbe372b751a5ec8ee8c2f864aadd" name="procmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22" rel="36.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-28" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-29" date="1326715200">- Rebuilt without NO_NFS_ATIME_HACK
  Resolves: rhbz#666383</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.22-30" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-31" date="1346760000">- Hardened build with PIE and full RELRO
  Resolves: rhbz#853186</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-32" date="1359979200">- Updated sources URLs</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-33" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.22-34" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-35" date="1409832000">- Fixed buffer overflow in formail
  Resolves: CVE-2014-3618</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36" date="1490184000">- Fixed several out of bounds RWs
  Resolves: rhbz#1138526</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.22-36.1" date="1511265600">- Fixed possible buffer overflow in loadbuf function
  Resolves: CVE-2017-16844</changelog>
</package>
<package pkgid="996368d914716acd5b0b4001c86233012fdbdfeb4c8e28154e62aec59b41c63b" name="pygobject3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.0" rel="1.el7_4.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.13.4-2" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-1" date="1408449600">- Update to 3.13.90</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.90-2" date="1408622400">- Backport a fix for virt-manager crash (#1130758)</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.91-1" date="1409659200">- Update to 3.13.91</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.13.92-1" date="1410868800">- Update to 3.13.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.14.0-1" date="1411387200">- Update to 3.14.0</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.14.0-2" date="1432296000">- Add patch to fix a coverity issue
  https://bugzilla.gnome.org/show_bug.cgi?id=749698</changelog>
  <changelog author="Matthew Barnes &lt;mbarnes@redhat.com&gt; - 3.14.0-3" date="1442318400">- Allow importing static modules to fix RHEL7 rebase regressions</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0
- Resolves: #1387039</changelog>
  <changelog author="John Francini - 3.22.0-1.1" date="1510228800">- Bump release to allow rebuild to fix BZ#1510160</changelog>
</package>
<package pkgid="3a19dacc4269634fc3eb26f40757c52ddf6cf23c4b25e5081cbc7fa819520ba9" name="python-backports-lzma-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.0.2" rel="9.el7"/>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-1" date="1376913600">- Initial package build</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-2" date="1377000000">- BR: python-backports</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-3" date="1377000001">- Actually fix check section</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-4" date="1377000002">- Fix perms on _lzma.so
- Add LICENSE from upstream</changelog>
  <changelog author="Ian Weller &lt;iweller@redhat.com&gt; - 0.0.2-5" date="1379419200">- Fix perms on _lzma.so, again</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-6" date="1398340800">- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-7" date="1399464000">- do not delete __init__.py* because no python-backports package for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 0.0.2-8" date="1418731200">- Resolves: rhbz#1158538 - delete __init__.py*, now provided by python-backports</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 0.0.2-9" date="1492516800">- Bump and build for all architectures</changelog>
</package>
<package pkgid="cd8001cfa23479c95d26e1c6427f5ca43f6cd7efc58faa43519d883b660914ac" name="python-cryptography-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="1.el7_4.1"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.0.2-2" date="1446638400">- Rebuilt for Python3.5 rebuild</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.1-1" date="1447243200">- Update to v1.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-1" date="1452340800">- Update to v1.2.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.2.1-2" date="1452513600">- Move python-cryptograph =&gt; python2-cryptography</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-1" date="1462276800">- Update to v1.3.1</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-2" date="1462881600">- Make it easier to build on EL7</changelog>
  <changelog author="Nathaniel McCallum &lt;npmccallum@redhat.com&gt; - 1.3.1-3" date="1462881601">- Remove versioned setuptools dependency</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1" date="1487073600">- Update to 1.7.2
- Disable pytest.deprecated_call() tests
- Remove versioned pytest
- Add build requirements pytz</changelog>
  <changelog author="Christian Heimes &lt;cheimes@redhat.com&gt; - 1.7.2-1.1" date="1502712000">- Ignore errors on OpenSSL's error stack when initializing, fixes RHBZ#1485896
- Fix parsing of long OIDs, fixes RHBZ#1485898</changelog>
</package>
<package pkgid="d4ae65b90174001a3661400bf15e6fce55c429de0a86a1fe85eeb4054dc3ed48" name="python-dmidecode-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="1.1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; 3.10.14-5" date="1342699200">- Upstream relocated. Document source tag and tarball generation.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-6" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.10.13-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-8" date="1371470400">- Attribute dmispec may cause invalid XML on some hardware.
- Signal handler for SIGILL.</changelog>
  <changelog author="Ales Ledvinka &lt;aledvink@redhat.com&gt; - 3.10.13-9" date="1371729600">- Attribute installed may appear as duplicate and cause invalid XML.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-10" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.10.13-11" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1" date="1489406400">- Update to new release
- Resolves: #1431548</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 3.12.2-1.1" date="1511179200">- Revert interface changes
- Resolves: #1514017</changelog>
</package>
<package pkgid="d90c0568e4f5630f4943693abf9aca3960a59326c060ee30c318bbb426cd8350" name="python-gevent-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0" rel="3.el7"/>
  <changelog author="Silas Sewell &lt;silas@sewell.ch&gt; - 0.13.3-1" date="1297857600">- Update to 0.13.3</changelog>
  <changelog author="Silas Sewell &lt;silas@sewell.org&gt; - 0.13.6-1" date="1311508800">- Update to 0.13.6</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.6-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.6-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Silas Sewell &lt;silas@sewell.org&gt; - 0.13.8-1" date="1356609600">- Update to 0.13.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.13.8-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; - 1.0-1" date="1390392000">- Update to 1.0</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0-2" date="1397736000">- Rebuilt for RHEL-7</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1.0-3" date="1492516800">- Bump and rebuild for all architectures</changelog>
</package>
<package pkgid="918656a630a6021bddf5234b345b82864784ae37ab09b9744cbd9324f5b8fa72" name="python-greenlet-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="4.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-10" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.3.1-11" date="1349956800">- Add support for ppc64</changelog>
  <changelog author="P&#xE1;draig Brady &lt;P@draigBrady.com&gt; - 0.4.0-1" date="1358510400">- Update to 0.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.0-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; 0.4.1-1" date="1375704000">- Update to 0.4.1
- Fix FTBFS bug #993134</changelog>
  <changelog author="Orion Poplawski &lt;orion@cora.nwra.com&gt; 0.4.2-1" date="1390478400">- Update to 0.4.2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-2" date="1397476800">- include gcc-c++ BR
- Rebuilt for RHEL-7</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; 0.4.2-3" date="1397476801">- gcc-c++ present in default buildroot, not required in BR</changelog>
  <changelog author="d.marlin &lt;dmarlin@redhat.com&gt;" date="1488888000">- Add support for ppc64 in LE mode running ABIv2
  Signed-off-by: Ulrich Weigand &lt;uweigand@de.ibm.com&gt;
  Signed-off-by: Tony Breeds &lt;tony@bakeyournoodle.com&gt;
  rhbz#1252900
- Remove s390x from skip check list.
- Bump release and build of all archs.</changelog>
</package>
<package pkgid="db27f32b0f770ecf8369d4cb3413467c22fb1ef32bf6ae06fa37f122f5882d2b" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.1.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-685.el7]" date="1497873600">- [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
- [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
- [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
- [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
- [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
- [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
- [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
- [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
- [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
- [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
- [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
- [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
- [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
</package>
<package pkgid="d858396a3ca217c82ae6654981992cdfd9e3d7d1c03bcfd4ef4a20ed7c39f992" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
</package>
<package pkgid="8ae2a7bd50f3103595561ef15a91dd3458159fa8d4cc2a4222e73b84c612dd81" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.11.6.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.6.1.el7]" date="1507291200">- [netdrv] mlx5: Avoid using pending command interface slots (Don Dutile) [1497604 1463367]
- [x86] amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Zen SMT topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Bring back Compute Unit ID (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Fix Bulldozer topology (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu/amd: Clean up cpu_llc_id assignment per topology feature (Suravee Suthikulpanit) [1497603 1477397]
- [x86] cpu: Get rid of compute_unit_id (Suravee Suthikulpanit) [1497603 1477397]
- [x86] amd: Derive L3 shared_cpu_map from cpu_llc_shared_mask (Suravee Suthikulpanit) [1497238 1477399]
- [net] ipv6: only call ip6_route_dev_notify() once for NETDEV_UNREGISTER (Matteo Croce) [1497121 1468935]
- [fs] gfs2: Fix debugfs glocks dump (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Replace rhashtable_walk_init with rhashtable_walk_enter (Andreas Grunbacher) [1497078 1493067]
- [fs] gfs2: Deduplicate gfs2_{glocks,glstats}_open (Andreas Grunbacher) [1497078 1493067]
- [cpufreq] intel_pstate: Fix unsafe HWP MSR access (Steve Best) [1497058 1457552]
- [s390] af_iucv: correctly copy SKB data (add missing hunk from 04d0ec) (Hendrik Brueckner) [1494354 1459782]
- [sound] alsa: timer: Use common error handling code in alsa_timer_init() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Adjust a condition check in snd_timer_resolution() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Follow standard EXPORT_SYMBOL() declarations (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Wrap with spinlock for queue access (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Improve user queue reallocation (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Fix race between read and ioctl (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Info leak in snd_timer_user_tinterrupt() (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: remove some dead code (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}
- [sound] alsa: timer: Reject user params with too small ticks (Jaroslav Kysela) [1465998 1465999] {CVE-2017-1000380}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.7.1.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.3.el7]" date="1513166400">- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.4.el7]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.5.el7]" date="1513944000">- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.11.6.el7]" date="1514462400">- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}</changelog>
</package>
<package pkgid="291a05080bbe0d6f6432044803b4b6c0740fe6cd8424cf30141514582dc0c925" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.17.1.el7"/>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.8.1.el7]" date="1508414400">- [x86] kvm: x86: Fix potential preemption when get the current kvmclock timestamp (Marcelo Tosatti) [1503459 1496522]
- [x86] kvm: x86: remove irq disablement around KVM_SET_CLOCK/KVM_GET_CLOCK (Marcelo Tosatti) [1503459 1496522]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.9.1.el7]" date="1508500800">- [fs] ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1504115 1458728]
- [fs] ext4: fix off-by-in loop termination in ext4_find_unwritten_pgoff() (Bill O'Donnell) [1501387 1469363]
- [fs] ext4: fix SEEK_HOLE (Bill O'Donnell) [1501387 1469363]
- [fs] xfs: Move handling of missing page into one place in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: Fix missed holes in SEEK_HOLE implementation (Bill O'Donnell) [1498736 1460446]
- [fs] xfs: fix off-by-one on max nr_pages in xfs_find_get_desired_pgoff() (Eryu Guan) [1502731 1458997]
- [nvme] Test unit Ready broken for nvme drvices (David Milburn) [1502733 1478457]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Mohammed Gamal) [1495763 1491843]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Mohammed Gamal) [1495763 1467258]
- [netdrv] netvsc: propagate MAC address change to VF slave (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: delay setup of VF device (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: make sure and unregister datapath (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: fix rtnl deadlock on unregister of vf (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: transparent VF management (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the carrier state error when data path is off (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] hv_netvsc: Fix the queue index computation in forwarding case (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: handle select_queue when device is being removed (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: report per-channel stats in ethtool statistics (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: account for packets/bytes transmitted after completion (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: group all per-channel state together (Vitaly Kuznetsov) [1500321 1477784]
- [netdrv] netvsc: enhance transmit select_queue (Vitaly Kuznetsov) [1500321 1477784]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.10.1.el7]" date="1508846400">- [mm] mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd() (Rafael Aquini) [1505164 1472460]
- [mm] fix invalid node in alloc_migrate_target() (Rafael Aquini) [1505164 1472460]
- [mm] add !pte_present() check on existing hugetlb_entry callbacks (Rafael Aquini) [1505164 1472460]
- [fs] ceph: avoid accessing freeing inode in ceph_check_delayed_caps() (Ilya Dryomov) [1505163 1489426]
- [fs] nfsd: Fix general protection fault in release_lock_stateid() (J. Bruce Fields) [1505160 1500815]
- [fs] cifs: Reconnect expired SMB sessions (Leif Sahlberg) [1501526 1477052]
- [fs] cifs: Separate SMB2 header structure (Leif Sahlberg) [1501526 1429710]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-693.11.1.el7]" date="1509105600">- [powerpc] perf: Fix book3s kernel to userspace backtraces (Gustavo Duarte) [1506143 1492669]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
</package>
<package pkgid="fb6f6de019fad3109c8967be2909257e67c20db12e1f2814a740d98d598df17a" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.1.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-686.el7]" date="1498046400">- [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
- [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
- [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
- [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
- [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
- [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
- [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
- [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
- [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
- [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
- [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
- [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
- [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
</package>
<package pkgid="75de01b03d53f7e07431647901a41232f44bd40f921c883f2ea394b255941b13" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.2.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-687.el7]" date="1498478400">- [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
- [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
- [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
- [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
- [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
- [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
- [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
- [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
- [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
- [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
- [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
- [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
- [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-688.el7]" date="1498564800">- [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
- [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
- [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
- [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
- [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
- [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
- [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
- [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
- [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
- [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
- [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
- [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-689.el7]" date="1498564801">- [net] bridge: allow IPv6 when multicast flood is disabled (Ivan Vecera) [1464167]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.2.el7]" date="1504958400">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="a7ddccda8d070aedc32461321aab81c114f825e7b040f8104e76b0a0ed59539c" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.21.1.el7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.12.1.el7]" date="1509969600">- [net] netfilter: x_tables: don't use seqlock when fetching old counters (Florian Westphal) [1509176 1503702]
- [net] netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [1509176 1503702]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.13.1.el7]" date="1511784000">- [netdrv] bonding: discard lowest hash bit for 802.3ad layer 3+4 (Jarod Wilson) [1517797 1506619]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.14.1.el7]" date="1512302400">- [fs] ext4: Don't clear SGID when inheriting ACLs (Lukas Czerner) [1517829 1473480]
- [fs] ext4: preserve i_mode if __ext4_set_acl() fails (Lukas Czerner) [1517829 1473480]
- [x86] x86/smpboot: Fix __max_logical_packages estimate (Prarit Bhargava) [1517803 1474709]
- [x86] x86/topology: Avoid wasting 128k for package id array (Prarit Bhargava) [1517803 1474709]
- [x86] perf/x86/intel/uncore: Cache logical pkg id in uncore driver (Prarit Bhargava) [1517803 1474709]
- [netdrv] bonding: fix slave stuck in BOND_LINK_FAIL state (Jarod Wilson) [1516169 1496837]
- [crypto] x86/sha1 - Fix reads beyond the number of blocks passed (Herbert Xu) [1515838 1469200]
- [edac] skx_edac: Handle systems with segmented PCI busses (Yasuyuki Kobayashi) [1515111 1500572]
- [scsi] virtio_scsi: let host do exception handling (Paolo Bonzini) [1515107 1501309]
- [mm] Fix panic due to NULL pointer dereference in __memcg_kmem_get_cache() (Larry Woodman) [1515105 1490495]
- [s390] mm: fix write access check in gup_huge_pmd() (Hendrik Brueckner) [1513316 1506126]
- [fs] xfs: reinit btree pointer on attr tree inactivation walk (Carlos Maiolino) [1512812 1469296]
- [s390] s390/3270: fix allocation of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix use after free of tty3270_screen structure (Daniel Vacek) [1508355 1495587]
- [s390] s390/3270: fix return value check in tty3270_resize_work() (Daniel Vacek) [1508355 1495587]
- [scsi] sd: Implement blacklist option for WRITE SAME w/ UNMAP (Ewan Milne) [1507043 1462594]
- [lib] assoc_array: Fix a buggy node-splitting case (David Howells) [1502624 1501286] {CVE-2017-12193}
- [security] keys: prevent KEYCTL_READ on negative key (David Howells) [1498369 1498371] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.15.1.el7]" date="1513252800">- [net] udp: fix bcast packet reception (Paolo Abeni) [1506530 1493238]
- [net] udp: perform source validation for mcast early demux (Paolo Abeni) [1506530 1493238]
- [net] ipv4: early demux can return an error code (Paolo Abeni) [1506530 1493238]
- [net] tcp: reset sk_rx_dst in tcp_disconnect() (Jamie Bainbridge) [1520296 1467770]
- [md] dm cache: fix race condition in the writeback mode overwrite_bio optimisation (Mike Snitzer) [1517795 1512095]
- [net] packet: in packet_do_bind, test fanout with bind_lock held (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: hold bind lock when rebinding to fanout hook (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: Do not call fanout_release from atomic contexts (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [net] packet: fix races in fanout_add() (Hangbin Liu) [1505430 1505429] {CVE-2017-15649}
- [security] keys: Fix handling of stored error in a negatively instantiated user key (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Differentiate uses of rcu_dereference_key() and user_key_payload() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Use memzero_explicit() for secret data (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}
- [security] keys: Fix an error code in request_master_key() (David Howells) [1411618 1479727 1411622 1450158] {CVE-2015-8539 CVE-2017-7472}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.16.1.el7]" date="1515844800">- [x86] smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava) [1533022 1519503]
- [x86] topology: Add topology_max_smt_threads() (Prarit Bhargava) [1533022 1519503]
- [powerpc] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Jon Masters) [1519800 1519801] {CVE-2017-5754}
- [s390] add ppa to system call and program check path (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [s390] spinlock: add gmb memory barrier (Jon Masters) [1519788 1519786] {CVE-2017-5753}
- [s390] introduce CPU alternatives (Jon Masters) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Andrea Arcangeli) [1533373 1533250]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Andrea Arcangeli) [1533373 1533250]
- [fs] userfaultfd: clear the vma-&gt;vm_userfaultfd_ctx if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1533372 1531287]
- [x86] kaiser/efi: unbreak tboot (Andrea Arcangeli) [1519795 1532989 1519798 1531559] {CVE-2017-5715}
- [x86] spec_ctrl: don't call ptrace_has_cap in the IBPB ctx switch optimization (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/efi: unbreak EFI old_memmap (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpuidle_idle_call: fix double local_irq_enable() (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf sorting part #2 (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu: fix get_scattered_cpu_leaf for IBPB feature (Paolo Bonzini) [1519795 1519798]
- [x86] spec_ctrl: Eliminate redundant FEATURE Not Present messages (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: skip IBRS/CR3 restore when paranoid exception returns to userland (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: consider the init_mm.pgd a kaiser pgd (Andrea Arcangeli) [1519795 1519798] {CVE-2017-5715}
- [x86] kaiser/mm: convert userland visible "kpti" name to "pti" (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] kaiser/mm: __load_cr3 in resume from RAM after kernel gs has been restored (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: issue a __spec_ctrl_ibpb if a credential check isn't possible (Andrea Arcangeli) [1519795 1519798]
- [x86] mm/kaiser: disable global pages by default with KAISER (Andrea Arcangeli) [1519795 1519798]
- Revert "x86/mm/kaiser: Disable global pages by default with KAISER" (Andrea Arcangeli) [1519795 1519798]
- [x86] ibpb: don't optimize spec_cntrl_ibpb on PREEMPT_RCU (Andrea Arcangeli) [1519795 1519798]
- [x86] spec_ctrl: clear registers after 32bit syscall stackframe is setup (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Andrea Arcangeli) [1519800 1519801]
- [x86] kaiser/mm: fix pgd freeing in error path (Andrea Arcangeli) [1519800 1519801]
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715 CVE-2017-5754}
- [x86] dumpstack: Remove raw stack dump (Josh Poimboeuf) [1519795 1519798]
- [x86] spec_ctrl: remove SPEC_CTRL_DEBUG code (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup unnecessary ptregscall_common function (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall entrance (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: add debug aid to test the entry code without microcode (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace current thread (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] kvm: pad RSB on VM transition (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [tools] objtool: Don't print 'call dest' warnings for ignored functions (Josh Poimboeuf) [1519795 1519798] {CVE-2017-5715}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [fs] prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [kernel] userns: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [misc] locking/barriers: introduce new memory barrier gmb() (Josh Poimboeuf) [1519788 1519786] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: fix RESTORE_CR3 crash in kaiser_stop_machine (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use atomic ops to poison/unpoison user pagetables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Fix reboot interaction with CR4.PCIDE (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: enable kaiser in build (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: handle call to xen_pv_domain() on PREEMPT_RT (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: trampoline stack comments (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove paravirt clock warning (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map debug IDT tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [perf] x86/intel/uncore: Fix memory leaks on allocation failures (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [fs] userfaultfd: non-cooperative: fix fork use after free (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] userfaultfd: hugetlbfs: remove superfluous page unlock in VM_SHARED case (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}
- [mm] fix bad rss-counter if remap_file_pages raced migration (Josh Poimboeuf) [1519800 1519801] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.17.1.el7]" date="1515931200">- [s390] locking/barriers: remove old gmb() macro definition (Denys Vlasenko) [1519788 1519786]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.18.1.el7]" date="1516536000">- [md] raid5: fix a race condition in stripe batch (Nigel Croxon) [1535883 1496836]
- [security] selinux: fix double free in selinux_parse_opts_str() (Paul Moore) [1532288 1456843]
- [fs] nfs: revert "nfs: Move the flock open mode check into nfs_flock()" (Benjamin Coddington) [1531095 1497225]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.19.1.el7]" date="1517486400">- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/spec_ctrl: cleanup __ptrace_may_access (Josh Poimboeuf) [1539649 1535644]
- [x86] bugs: Drop one "mitigation" from dmesg (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: vmx: Make indirect call speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] kvm: x86: Make indirect calls in emulator speculation safe (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Optimize inline assembler for vmexit_fill_RSB (Josh Poimboeuf) [1539649 1535644]
- [x86] mce: Make machine check speculation protected (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: Document retpolines and ibrs_enabled=3 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: upgrade GCC retpoline warning to an error (Josh Poimboeuf) [1539649 1535644]
- [x86] Use IBRS for firmware update path (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: enforce sane combinations of IBRS and retpoline (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: use upstream RSB stuffing function (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Josh Poimboeuf) [1539649 1535644]
- [kernel] x86/jump_label: warn on failed jump label patch (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: detect unretpolined modules (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Fill return stack buffer on vmexit (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/xen: Convert Xen hypercall indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/ftrace: Convert ftrace assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/entry: Convert entry assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Josh Poimboeuf) [1539649 1535644]
- [x86] retpoline: Add initial retpoline support (Josh Poimboeuf) [1539649 1535644]
- [x86] jump_label: add asm support for static keys (Josh Poimboeuf) [1539649 1535644]
- [x86] asm: Make asm/alternative.h safe from assembly (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Support new GCC 6 switch jump table pattern (Josh Poimboeuf) [1539649 1535644]
- [tools] objtool: Detect jumps to retpoline thunks (Josh Poimboeuf) [1539649 1535644]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: print features changed by microcode loading (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibrs_enabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add ibp_disabled variable (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove performance measurements from documentation (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: make ipbp_enabled read-only (Josh Poimboeuf) [1539649 1535644]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Josh Poimboeuf) [1539649 1535644]
- [base] sysfs/cpu: Add vulnerability folder (Josh Poimboeuf) [1539649 1535644]
- [x86] cpu: Merge bugs.c and bugs_64.c (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: int80 must not clobber r12-15 (Josh Poimboeuf) [1539649 1535644]
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Add early cmdline parsing for options with arguments (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Pass in size to early cmdline parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Simplify early command line parsing (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when partial word matches (Josh Poimboeuf) [1539649 1535644]
- [x86] boot: Fix early command-line parsing when matching at end (Josh Poimboeuf) [1539649 1535644]
- [scsi] storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [1536978 1502601]
- [fs] nfs: RPC_MAX_AUTH_SIZE is in bytes ("J. Bruce Fields") [1533378 1495321]
- [fs] nfsd: give out fewer session slots as limit approaches (Dave Wysochanski) [1533377 1492234]
- [fs] nfsd: increase DRC cache limit (Dave Wysochanski) [1533377 1492234]
- [x86] kvm: x86: fix RSM when PCID is non-zero (Paolo Bonzini) [1531662 1530711]
- [x86] iommu/amd: Reduce delay waiting for command buffer space (Suravee Suthikulpanit) [1531456 1508644]
- [x86] iommu/amd: Reduce amount of MMIO when submitting commands (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Remove cmd_buf_size and evt_buf_size from struct amd_iommu (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Fix the left value check of cmd buffer (Suravee Suthikulpanit) [1531456 1508644]
- [x86] amd: Don't put completion-wait semaphore on stack (Suravee Suthikulpanit) [1531456 1508644]
- [x86] kvm: svm: obey guest PAT (Suravee Suthikulpanit) [1530976 1478185]
- [tty] serial: 8250_pci: Add Amazon PCI serial device ID (Vitaly Kuznetsov) [1530137 1527545]
- [ata] libata: sata_down_spd_limit should return if driver has not recorded sstatus speed (David Milburn) [1530136 1457140]
- [fs] nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [1530135 1506382]
- [fs] nfsv4.0: Fix a lock leak in nfs40_walk_client_list (Scott Mayhew) [1530135 1506382]
- [fs] nfs: Create a common nfs4_match_client() function (Scott Mayhew) [1530135 1506382]
- [fs] autofs - revert: take more care to not update last_used on path walk (Ian Kent) [1525994 1489542]
- [vhost] vhost_net: correctly check tx avail during rx busy polling (Jason Wang) [1523784 1487551]
- [crypto] shash - Fix has_key setting (Herbert Xu) [1522932 1505817]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1522698 1513725]
- [x86] tsc: Force TSC_ADJUST register to value &gt;= zero (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Validate cpumask pointer before accessing it (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Try to adjust TSC if sync test fails (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Prepare warp test for TSC adjustment (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Move sync cleanup to a safe place (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Sync test only for the first cpu in a package (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Verify TSC_ADJUST from idle (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Store and check TSC ADJUST MSR (Prarit Bhargava) [1519850 1497055]
- [x86] tsc: Detect random warps (Prarit Bhargava) [1519850 1497055]
- [x86] kvm: mmu: always terminate page walks at level 1 (Paolo Bonzini) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: nVMX: update last_nonleaf_level when initializing nested EPT (Denys Vlasenko) [1500382 1500381] {CVE-2017-12188}
- [x86] kvm: fix singlestepping over syscall (Paolo Bonzini) [1464480 1464481] {CVE-2017-7518}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.20.1.el7]" date="1518004800">- [x86] locking/qspinlock: Fix kabi problem in a non-KVM/XEN VM (Waiman Long) [1539797 1533529]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [3.10.0-693.21.1.el7]" date="1519387200">- [x86] platform/uv: Mark tsc_check_sync as an init function (Frank Ramsay) [1547870 1526066]
- [x86] platform/uv: Add check of TSC state set by UV BIOS (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Provide a means to disable TSC ART (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Drastically reduce the number of firmware bug warnings (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Skip TSC test and error messages if already unstable (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Add option that TSC on Socket 0 being non-zero is valid (Frank Ramsay) [1547870 1526066]
- [x86] tsc: Remove the TSC_ADJUST clamp (Frank Ramsay) [1547870 1526066]</changelog>
</package>
<package pkgid="56c013984e374255ab83f60e7499e901d63ddb74b54277192fb268cef281b658" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="693.5.2.el7"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-690.el7]" date="1498651200">- [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
- [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
- [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
- [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
- [target] tcmu: break up free_device callback (Mike Christie) [1430225]
- [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
- [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
- [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-691.el7]" date="1498737600">- [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-692.el7]" date="1499342400">- [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
- [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
- [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
- [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
- [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
- [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
- [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; [3.10.0-693.el7]" date="1499342401">- [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
- [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
- [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.1.1.el7]" date="1501761600">- [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
- [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
- [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.2.1.el7]" date="1502452800">- [nvme] nvmet-rdma: occasionally flush ongoing controller teardown (Slava Shwartsman) [1479850 1467998]
- [nvme] Free bio_aux struct when done with bio (David Milburn) [1474679 1455553]
- [mm] thp: respect MPOL_PREFERRED policy with non-local node (Larry Woodman) [1479763 1476709]
- [char] ipmi: use rcu lock around call to intf-&gt;handlers-&gt;sender() (Tony Camuso) [1479761 1419765]
- [x86] vmware: Use tsc_khz value for calibrate_cpu() (Prarit Bhargava) [1479246 1475716]
- [netdrv] cxgb4: reduce resource allocation in kdump kernel (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix a NULL dereference (Sai Vemuri) [1478255 1379762]
- [netdrv] cxgb4: fix BUG() on interrupt deallocating path of ULD (Mauricio Oliveira) [1475671 1465554]
- [netdrv] bonding: Fix transmit load balancing in balance-alb mode (Jarod Wilson) [1475670 1473481]
- [fs] xfs: use -&gt;b_state to fix buffer I/O accounting release race (Brian Foster) [1478254 1452228]
- [net] dst: Fix an intermittent pr_emerg warning about lo becoming free (Xin Long) [1475675 1458111]
- [powerpc] eeh: Fix partial hotplug criterion (Gustavo Duarte) [1475672 1458508]
- [powerpc] eeh: Fix wrong argument passed to eeh_rmv_device() (Gustavo Duarte) [1475672 1458508]
- [crypto] api - Move alg ref count init to crypto_check_alg (Herbert Xu) [1475668 1473593]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.3.1.el7]" date="1504526400">- [block] blk-mq-tag: fix wakeup hang after tag resize (Ming Lei) [1487281 1472434]</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.4.1.el7]" date="1504872000">- [fs] nfsv4: Add missing nfs_put_lock_context() (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: discard nfs_lockowner structure (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: enhance nfs4_copy_lock_stateid to use a flock stateid if there is one (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_select_rw_stateid to take a lock_context inplace of lock_owner (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: change nfs4_do_setattr to take an open_context instead of a nfs4_state (Benjamin Coddington) [1487271 1476826]
- [fs] nfsv4: add flock_owner to open context (Benjamin Coddington) [1487271 1476826]
- [fs] nfs: remove l_pid field from nfs_lockowner (Benjamin Coddington) [1487271 1476826]
- [x86] platform/uv/bau: Disable BAU on single hub configurations (Frank Ramsay) [1487159 1487160 1472455 1473353]
- [x86] platform/uv/bau: Fix congested_response_us not taking effect (Frank Ramsay) [1487159 1472455]
- [fs] cifs: Disable encryption capability for RHEL 7.4 kernel (Sachin Prabhu) [1485445 1485445]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures (Dave Wysochanski) [1484269 1479043]
- [fs] include/linux/printk.h: include pr_fmt in pr_debug_ratelimited (Sachin Prabhu) [1484267 1472823]
- [fs] printk: pr_debug_ratelimited: check state first to reduce "callbacks suppressed" messages (Sachin Prabhu) [1484267 1472823]
- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481938 1481940] {CVE-2017-1000111}
- [fs] proc: revert /proc/&lt;pid&gt;/maps [stack:TID] annotation (Waiman Long) [1481724 1448534]
- [net] ping: check minimum size on ICMP header length (Matteo Croce) [1481578 1481573] {CVE-2016-8399}
- [ipc] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476128 1476126] {CVE-2017-11176}
- [netdrv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474778 1474784] {CVE-2017-7541}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.1.el7]" date="1505563200">- [netdrv] i40e: point wb_desc at the nvm_wb_desc during i40e_read_nvm_aq (Stefan Assmann) [1491972 1484232]
- [netdrv] i40e: avoid NVM acquire deadlock during NVM update (Stefan Assmann) [1491972 1484232]
- [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- [fs] nfsv4: Ensure we don't re-test revoked and freed stateids (Dave Wysochanski) [1491969 1459733]
- [netdrv] bonding: commit link status change after propose (Jarod Wilson) [1491121 1469790]
- [mm] page_alloc: ratelimit PFNs busy info message (Jonathan Toppins) [1491120 1383179]
- [netdrv] cxgb4: avoid crash on PCI error recovery path (Gustavo Duarte) [1489872 1456990]
- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1489814 1468727]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488341 1487061] {CVE-2017-14106}
- [net] sctp: Avoid out-of-bounds reads from address storage (Stefano Brivio) [1484356 1484355] {CVE-2017-7558}
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: account for current skb length when deciding about UFO (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481530 1481535] {CVE-2017-1000112}
- [net] udp: avoid ufo handling on IP payload compression packets (Stefano Brivio) [1490263 1464161]
- [pci] hv: Use vPCI protocol version 1.2 (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Add vPCI version protocol negotiation (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Use page allocation for hbus structure (Vitaly Kuznetsov) [1478256 1459202]
- [pci] hv: Fix comment formatting and use proper integer fields (Vitaly Kuznetsov) [1478256 1459202]
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Stefano Brivio) [1477007 1477010] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [1477007 1477010] {CVE-2017-7542}
- [net] xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Hannes Frederic Sowa) [1435672 1435670] {CVE-2017-7184}
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1489788 1489789] {CVE-2017-1000251}</changelog>
  <changelog author="Alexander Gordeev &lt;agordeev@redhat.com&gt; [3.10.0-693.5.2.el7]" date="1507896000">- [mm] page_cgroup: Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]
- Revert: [mm] Fix Kernel bug during boot with memory cgroups enabled (Larry Woodman) [1491970 1483747]</changelog>
</package>
<package pkgid="de5b5eb70d007810aa9a12edb953676956828661a8f8eabeedbf2abd2d75c4af" name="python-rhsm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="1.el7_4"/>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.19.1-1" date="1485345600">- Adjust our C bindings for OpenSSL v1.1 API. (awood@redhat.com)
- Make python-rhsm Python-3 compatible (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.2-1" date="1489406400">- 1423443: Handle IndexError during m2crypto request (khowell@redhat.com)
- Move python-rhsm into subdirectory (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.3-1" date="1490961600">- 1435475: Support older versions of M2Crypto (awood@redhat.com)
- 1427069: Prioritize content from Basic entitlements (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.4-1" date="1491825600">- 1438552: Allows releases to be listed through a proxy (csnyder@redhat.com)
- 1420533: Add no_proxy option to API, config, UI (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.5-1" date="1492430400">- 1432990: Better message for bad CA cert (wpoteat@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.6-1" date="1493726400">- 1426343: fixed rct to display cert without subjectAltName.
  (jhnidek@redhat.com)
- Add Update subscriptions pools (tcoufal@redhat.com)
- Add support to list future subscription pools (tcoufal@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.7-1" date="1495627200">- 1443159: Added default value for splay configuration (jhnidek@redhat.com)
- 1451166: Fix Host header when using proxy (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.8-1" date="1496145600">- 1443164: no_proxy match the host name when *.redhat.com is used
  (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.9-1" date="1496836800">- 1444453: Have gettext return unicode instead of bytes. (awood@redhat.com)
- 1457197: Env. variable no_proxy=* is not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.19.10-1" date="1504267200">- 1481384: Do not update redhat.repo at RateLimitExceededException
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="8424c0d8a0ade19468fa9fb4f8b8ff9104af4ad561c9b80300007c1278d0fa50" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-133.el7" date="1489060800">- kvm-target-i386-add-Ivy-Bridge-CPU-model.patch [bz#1368375]
- kvm-x86-add-AVX512_4VNNIW-and-AVX512_4FMAPS-features.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Kill-unused-code.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-level.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-CPU-v.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-No-need-to-check-xleve.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Set-all-feature-words-.patch [bz#1382122]
- kvm-target-i386-kvm_cpu_fill_host-Fill-feature-words-in-.patch [bz#1382122]
- kvm-target-i386-kvm_check_features_against_host-Kill-fea.patch [bz#1382122]
- kvm-target-i386-Make-TCG-feature-filtering-more-readable.patch [bz#1382122]
- kvm-target-i386-Filter-FEAT_7_0_EBX-TCG-features-too.patch [bz#1382122]
- kvm-target-i386-Filter-KVM-and-0xC0000001-features-on-TC.patch [bz#1382122]
- kvm-target-i386-Define-TCG_-_FEATURES-earlier-in-cpu.c.patch [bz#1382122]
- kvm-target-i386-Loop-based-copying-and-setting-unsetting.patch [bz#1382122]
- kvm-target-i386-Loop-based-feature-word-filtering-in-TCG.patch [bz#1382122]
- kvm-spice-remove-spice-experimental.h-include.patch [bz#1430606]
- kvm-spice-replace-use-of-deprecated-API.patch [bz#1430606]
- Resolves: bz#1368375
  ([Intel 7.4 Bug] qemu-kvm does not support “-cpu IvyBridge”)
- Resolves: bz#1382122
  ([Intel 7.4 FEAT] KVM Enable the avx512_4vnniw, avx512_4fmaps instructions in qemu)
- Resolves: bz#1430606
  (Can't build qemu-kvm with newer spice packages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
</package>
<package pkgid="0b5aa73cf1ed0314a6117f5aa9bab6140e87f22031e28956ada1b90a5c024254" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-134.el7" date="1490097600">- kvm-ui-vnc-introduce-VNC_DIRTY_PIXELS_PER_BIT-macro.patch [bz#1377977]
- kvm-ui-vnc-derive-cmp_bytes-from-VNC_DIRTY_PIXELS_PER_BI.patch [bz#1377977]
- kvm-ui-vnc-optimize-dirty-bitmap-tracking.patch [bz#1377977]
- kvm-ui-vnc-optimize-setting-in-vnc_dpy_update.patch [bz#1377977]
- kvm-ui-vnc-fix-vmware-VGA-incompatiblities.patch [bz#1377977]
- kvm-ui-vnc-fix-potential-memory-corruption-issues.patch [bz#1377977]
- kvm-vnc-fix-memory-corruption-CVE-2015-5225.patch [bz#1377977]
- kvm-vnc-fix-overflow-in-vnc_update_stats.patch [bz#1377977]
- kvm-i386-kvmvapic-initialise-imm32-variable.patch [bz#1335751]
- kvm-qemu-iotests-Filter-out-actual-image-size-in-067.patch [bz#1427176]
- vm-qcow2-Don-t-rely-on-free_cluster_index-in-alloc_ref2.patch [bz#1427176]
- kvm-qemu-iotests-Fix-core-dump-suppression-in-test-039.patch [bz#1427176]
- kvm-qemu-io-Add-sigraise-command.patch [bz#1427176]
- kvm-iotests-Filter-for-Killed-in-qemu-io-output.patch [bz#1427176]
- kvm-iotests-Fix-test-039.patch [bz#1427176]
- kvm-blkdebug-Add-bdrv_truncate.patch [bz#1427176]
- kvm-vhdx-Fix-zero-fill-iov-length.patch [bz#1427176]
- kvm-qemu-iotests-Disable-030-040-041.patch [bz#1427176]
- kvm-x86-add-AVX512_VPOPCNTDQ-features.patch [bz#1415830]
- kvm-usb-ccid-check-ccid-apdu-length.patch [bz#1419818]
- kvm-usb-ccid-better-bulk_out-error-handling.patch [bz#1419818]
- kvm-usb-ccid-move-header-size-check.patch [bz#1419818]
- kvm-usb-ccid-add-check-message-size-checks.patch [bz#1419818]
- kvm-spec-Update-rdma-build-dependency.patch [bz#1433920]
- Resolves: bz#1335751
  (CVE-2016-4020 qemu-kvm: Qemu: i386: leakage of stack memory to guest in kvmvapic.c [rhel-7.4])
- Resolves: bz#1377977
  (qemu-kvm coredump in vnc_raw_send_framebuffer_update [rhel-7.4])
- Resolves: bz#1415830
  ([Intel 7.4 FEAT] Enable vpopcntdq for KNM - qemu/kvm)
- Resolves: bz#1419818
  (CVE-2017-5898 qemu-kvm: Qemu: usb: integer overflow in emulated_apdu_from_guest [rhel-7.4])
- Resolves: bz#1427176
  (test cases of qemu-iotests failed)
- Resolves: bz#1433920
  (Switch from librdmacm-devel to rdma-core-devel)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-135.el7" date="1490875200">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430060]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430060]
- kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430060]
- kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430060]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430060]
- Resolves: bz#1430060
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.4])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
</package>
<package pkgid="afbad087231d25b14fcb52fda30bec77df24ec7ba91d78d4a12ba72e78214013" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-136.el7" date="1492516800">- kvm-target-i386-get-set-migrate-XSAVES-state.patch [bz#1327593]
- kvm-Removing-texi2html-from-build-requirements.patch [bz#1440987]
- kvm-Disable-build-of-32bit-packages.patch [bz#1441778]
- kvm-Add-sample-images-to-srpm.patch [bz#1436280]
- Resolves: bz#1327593
  ([Intel 7.4 FEAT] KVM Enable the XSAVEC, XSAVES and XRSTORS instructions)
- Resolves: bz#1436280
  (sample images  for qemu-iotests are missing in the SRPM)
- Resolves: bz#1440987
  (Remove texi2html build dependancy from RPM)
- Resolves: bz#1441778
  (Stop building qemu-img for 32bit architectures.)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
</package>
<package pkgid="45373ff161742c1887360ed9292e1f3eb28ae647a253a29c45f3b86910ef874b" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-137.el7" date="1493380800">- kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1299875]
- Resolves: bz#1299875
  (system_reset should clear pending request for error (IDE))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
</package>
<package pkgid="34b12a16e5f8b20d9a7bd37d737283400156c01e34049e9f61afe77e68401357" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="141.el7_4.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-138.el7" date="1495540800">- kvm-char-serial-cosmetic-fixes.patch [bz#1451470]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1451470]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1451470]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1451470]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1451470]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1451470]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1451470]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1451470]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1451470]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1451470]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1451470]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1451470]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1451470]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1451470]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1451470]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1451470]
- kvm-serial-remove-watch-on-reset.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-139.el7" date="1495627200">- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1451470]
- Resolves: bz#1451470
  (RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-140.el7" date="1496750400">- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1456983]
- Resolves: bz#1456983
  (Character device regression due to missing patch)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7" date="1497355200">- kvm-Fix-memory-slot-page-alignment-logic-bug-1455745.patch [bz#1455745]
- kvm-Do-not-hang-on-full-PTY.patch [bz#1452067]
- kvm-serial-fixing-vmstate-for-save-restore.patch [bz#1452067]
- kvm-serial-reinstate-watch-after-migration.patch [bz#1452067]
- kvm-nbd-Fully-initialize-client-in-case-of-failed-negoti.patch [bz#1451614]
- kvm-nbd-Fix-regression-on-resiliency-to-port-scan.patch [bz#1451614]
- Resolves: bz#1451614
  (CVE-2017-9524 qemu-kvm: segment fault when private user nmap qemu-nbd server [rhel-7.4])
- Resolves: bz#1452067
  (migration can confuse serial port user)
- Resolves: bz#1455745
  (Backport fix for broken logic that's supposed to ensure memory slots are page aligned)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.1" date="1499774400">- kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468107]
- Resolves: bz#1468107
  (CVE-2017-10664 qemu-kvm: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.2" date="1503316800">- kvm-virtio-net-dynamic-network-offloads-configuration.patch [bz#1482468]
- kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1482468]
- Resolves: bz#1482468
  (KVM: windows guest migration from EL6 to EL7 fails. [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.3" date="1510056000">- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.4" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.5" date="1511956800">- kvm-vfio-pci-Only-mmap-TARGET_PAGE_SIZE-regions.patch [bz#1515110]
- Resolves: bz#1515110
  (Regression in QEMU handling for sub-page MMIO BARs for vfio-pci devices [rhel-7.4.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-141.el7_4.6" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="a309c42445b68aa26b176b1b613480ceb1300171a32f15b37bf63154fbd46988" name="qt-debuginfo" arch="i686">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="aebd3c5691e057ad59cfa82250ae45383d2f139af51f72fd5e4bcf9e35cb5fe9" name="qt-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.8.5" rel="15.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-14" date="1495627200">- Don't close Qt apps in Gnome on shutdown dialog
  Resolves: bz#1378865</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.5-15" date="1505131200">- Fix data corruption in readData()
  Resolves: bz#1489851</changelog>
</package>
<package pkgid="51320d0c2589e70e3ffd8c121cdbf55d732c56151a96dc87f22d06ff620d2584" name="quagga-debuginfo" arch="i686">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="4f9dfe4627215e74c0ab5d9fa4fe08257170a64224b09ba03766be9f89979071" name="quagga-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.99.22.4" rel="5.el7_4"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.1-7" date="1371816000">- quagga is service which might implement networking, thus it should not have
  WantedBy=network.target in its systemd configuration
- resolves: #976883</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.99.22.1-8" date="1373544000">- drop unused BR in tetex</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 0.99.22.1-9" date="1373630400">- Rebuilt for new net-snmp</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.3-1" date="1375185600">- update to 0.99.22.3
- disable ospfapi and ospfclient
- fix bogus dates in changelog
- resolves : #984532</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.99.22.3-2" date="1375531200">- Perl 5.18 rebuild</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-1" date="1379073600">- update to 0.99.22.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.99.22.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.22.4-4" date="1392292800">- fix link to upstream tarball (#1059219)
- reference pidfiles of quagga daemons in service files (#842309)</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 0.99.22.4-5" date="1519041600">- Fixed CVE-2018-5379 - Double free vulnerability in bgpd when processing
  certain forms of UPDATE message allowing to crash or potentially execute
  arbitrary code
- Resolves: rhbz#1546015</changelog>
</package>
<package pkgid="cbbcfb04d42071ca43afbb3dcd52f8f451ee0148934da747e901e4c113f08233" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="3.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; 1.17.0-2" date="1431518400">- Fix Source tag
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
</package>
<package pkgid="89ea83e7a04da49e2eed46b579e2f2b7fbf3944f95bd71db5d1e57570ff2fc1a" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="4.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-1" date="1442232000">- New upstream release 1.17.2
Related: #1059196</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
</package>
<package pkgid="860fb93ab134db8f2361484be1302ea7ae8796b48da7aae7656875a2d405fa2d" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.00" rel="5.el7_4"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-2" date="1456228800">- rear does not require syslinux
- changing to arch package so that syslinux is installed
- Resolves: #1283927</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-3" date="1457438400">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1518782400">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231</changelog>
</package>
<package pkgid="def3135970e084104ebbc634a1709ab3ad23875d44e8baa7c4768a7703d96bb1" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.7" date="1516190400">- NovaEvacuate: add support for keystone v3 authentication

  Resolves: rhbz#1535394</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.8" date="1516708800">- sap_redhat_cluster_connector: fix unknown gvi function

  Resolves: rhbz#1537444</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.11" date="1519732800">- galera: fix temp logfile rights to support MySQL 10.1.21+

  Resolves: rhbz#1547142</changelog>
</package>
<package pkgid="d3573417c463de00509aa950834d28abeadd469df4ba714dc57b291178d70917" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-96" date="1493208000">- IPaddr2: add "preferred_lft" parameter for IPv6

  Resolves: rhbz#1445861</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
</package>
<package pkgid="84bea9a6c9377603a849ab785ab41a062b768c2119d7c61441c8c63a4cbe9eae" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-97" date="1493812800">- systemd: add drop-in for clvmd and LVM to avoid fencing on shutdown

  Resolves: rhbz#1316130</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-99" date="1494936000">- galera: fix bootstrap when cluster has no data

  Resolves: rhbz#1451097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
</package>
<package pkgid="86fbf5902bb9fbb372a9ce17fcd077766af46eba099e68873d94283f8988046e" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.5" rel="105.el7_4.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-100" date="1495454400">- docker: add "mount_points" parameter to be able to create directories

  Resolves: rhbz#1452049</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-101" date="1496145600">- LVM: status check for missing VG

  Resolves: rhbz#1454699</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-102" date="1496232000">- LVM: update metadata on start/relocate
- LVM: warn when cache mode is not writethrough

  Resolves: rhbz#1451933</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-104" date="1496404800">- SAPHana/SAPHanaTopology: update to version 0.152.21

  Resolves: rhbz#1449681</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105" date="1498219200">- rabbitmq-cluster: fix to keep expiration policy

  Resolves: rhbz#1342376</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.1" date="1505995200">- support per-host and per-bundle attributes

  Resolves: rhbz#1493915</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.2" date="1506686400">- NovaEvacuate: changes to support Instance HA on OSP12

  Resolves: rhbz#1497076</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.3" date="1510574400">- galera: recover from empty gvwstate.dat

  Resolves: rhbz#1512586</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.5" date="1512561600">- db2: fix HADR promote when master failed

  Resolves: rhbz#1521019</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 3.9.5-105.6" date="1512993600">- ocf_attribute_target: add fallback for Pacemaker versions without
  bundle support

  Resolves: rhbz#1524454</changelog>
</package>
<package pkgid="0fabd463d78c69bee705b8b74bdb4293bbd74fd276996fb63a7474389da4a7e1" name="ruby-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="d52e2de5ab13b02d250f670554b34b2cbca9b8b925dcd6c6f0a0d01a88ae5c25" name="ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="33.el7_4"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-24" date="1415966400">- Rebased to Ruby 2.0.0-p598.
  * Remove Patch19: ruby-2.0.0-p247-Make-stable-Gem-Specification.files-in-
      default-.gems.patch; subsumed
  * Remove Patch20: ruby-2.1.1-fix-test-failures-due-to-expired-certs.patch;
      subsumed
  * Remove Patch21: ruby-2.1.0-test_aes_gcm_wrong_tag-Dont-use-String
      -succ.patch; subsumed
  * Remove Patch22: ruby-2.2.0-fix-error-with-tzdata.patch; subsumed
  Resolves: rhbz#1071187
- Incorporates fixes for CVE-2014-8080 and CVE-2015-8090.
  Resolves: rhbz#1164000
- Fix for Proxy Realm feature.
  Resolves: rhbz#1122140
- Fix off-by-one stack-based buffer overflow in the encodes() function
  (CVE-2014-4975).
  Related: rhbz#1164000</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.598-25" date="1430136000">- Fix broken DNS Resolv when resolv.conf has option ndots &gt; 1.
  Resolves: rhbz#1200419</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-26" date="1462795200">- Rebase to Ruby 2.0.0-p648
  Resolves: rhbz#1197720, rhbz#1298282, rhbz#1258863
  * Remove Patch18: ruby-2.0.0-p247-Revert-mkmf.rb-prefix-install_dirs-only-
      with-DESTDIR.patch; subsumed
  * Remove Patch23: ruby-openssl-wrap-cipher-fix.patch; subsumed
  * Remove Patch25: ruby-2.0.0-p607-DNS-Resolv-fall-back-if-canonicalization-
      fails.patch; subsumed
- Remove tests depending on europe/moscow to avoid failures due to tzdata change
  https://github.com/eggert/tz/commit/8ee11a301cf173afb0c76e0315b9f9ec8ebb9d95
- Add checks for systemtap, abrt hook and rubygems version
- Fix significant hash table performance slowdown on ppc64le
  Resolves: rhbz#1163032
- Support in no_proxy for domain names with whitespaces and leading dots
  Resolves: rhbz#1300433</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-27" date="1464955200">- Apply previously unapplied patch #14
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
</package>
<package pkgid="858fcbeb78410338f52f6161325c1a06095175aec77310cf542559cf0fcb01fc" name="runc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="21.rc4.dev.gitaea4f21.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-12.1.gitf8ce01d" date="1497355200">- disable s390x temporarily because of indefinite wait times on brew</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-13.rc3.gitd40db12" date="1497355201">- Resolves: #1479489
- built commit d40db12</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-14.rc4dev.git84a082b" date="1506081600">- rebase to 84a082bfef6f932de921437815355186db37aeb1</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1.0.0-15.rc4dev.gitaea4f21" date="1508155200">- Use the same checkout as Fedora for lates CRI-O</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-16.rc4.dev.gitaea4f21" date="1508414400">- correct the release tag "rc4dev" -&gt; "rc4.dev" cause I'm OCD</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
</package>
<package pkgid="13ad737e4bc97dd300d73db1a6121914435dfa2a4839d89fcd4634d07050644b" name="runc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="23.rc4.dev.git1d3ab6d.el7"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-14.rc4dev.git84a082b" date="1506081600">- rebase to 84a082bfef6f932de921437815355186db37aeb1</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.com&gt; - 1.0.0-15.rc4dev.gitaea4f21" date="1508155200">- Use the same checkout as Fedora for lates CRI-O</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-16.rc4.dev.gitaea4f21" date="1508414400">- correct the release tag "rc4dev" -&gt; "rc4.dev" cause I'm OCD</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-22.rc4.git1d3ab6d" date="1512907200">- Many Stability fixes
- Many fixes for rootless containers
- Many fixes for static builds</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-23.rc4.git1d3ab6d" date="1513080000">- Resolves: #1524654</changelog>
</package>
<package pkgid="93fa65e1984e62203786fc73a49d35527e4cdda3a76d98baff7734fd5325f51e" name="runc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="26.rc4.dev.git9f9c962.el7"/>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-17.rc4.gitaea4f21" date="1508932800">- Add container-selinux prerequires to make sure runc is labeled correctly</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-18.rc4.dev.gitaea4f21" date="1509710400">- enable debuginfo</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-19.rc4.dev.gitaea4f21" date="1510056000">- disable debuginfo temporarily</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-20.rc4.dev.gitaea4f21" date="1510056001">- use Makefile</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-21.rc4.dev.gitaea4f21" date="1510228800">- enable debuginfo and include -buildmode=pie for go build</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-22.rc4.git1d3ab6d" date="1512907200">- Many Stability fixes
- Many fixes for rootless containers
- Many fixes for static builds</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-23.rc4.git1d3ab6d" date="1513080000">- Resolves: #1524654</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-24.rc4.dev.gitc6e4a1e.1" date="1513339200">- rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
- https://github.com/opencontainers/runc/pull/1651</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-25.rc4.gite6516b3" date="1513598400">- built commit e6516b3</changelog>
  <changelog author="Dan Walsh &lt;dwalsh@redhat.name&gt; - 1.0.0-26.rc4.git9f9c962" date="1516795200">- Bump to the latest from upstream</changelog>
</package>
<package pkgid="e36d8c715b20bc3bdf6e43f8cd35652bc0f98b1a3f44fa484a5ab76941e48ba2" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="f86f26540485514df98e1f98ddc8ab8d1bcaa72c02da56d2639501dd0eb1bdde" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="10.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-1" date="1491220800">- resolves: #1435734 - Fix refreshing winbind tickets</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
</package>
<package pkgid="23514e0b105380ac6b4e862ec857e33d890ded16992d58596a2a7718f1dc7476" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="db280637b70cd9c675601035d6a1174220f7254d8d49fa3dc6bb61c734df6f39" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="11.el7_4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-2" date="1494331200">- resolves: #1448544 - Fix spoolss 32bit driver upload</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
</package>
<package pkgid="0b94dca1477e496f0ed5cffbb391b83c8be8884fd5d3e95dfa31d22ca09aa8af" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="09f2b257418174f1c5362335d85ef92254f3fddc441b28d3fb7120cb8f5cac25" name="samba-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.2" rel="12.el7_4"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.6.2-3" date="1495108800">- resolves: #1450785 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-4" date="1496232000">- resolves: #1431986 - Fix expand_msdfs VFS module</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-5" date="1496836800">- related: #1277999 - Add missing patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-6" date="1497355200">- resolves: #1459179 - Fix smbclient session setup printing</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-7" date="1497960000">- resolves: #1461336 - Fix smbclient username parsing
- resolves: #1460937 - Fix username normalization with winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-8" date="1498132800">- resolves: #1459936 - Fix regression with "follow symlinks = no"</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-9" date="1502712000">- resolves: #1481188 - Fix 'net ads changetrustpw'</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-10" date="1503489600">- resolves: #1484423 - Require at least krb5 version 1.15.1
- resolves: #1484713 - Fix password changes for users via smbpasswd
- resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                       returned errors</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-11" date="1505390400">- resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.6.2-12" date="1510920000">- resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d97fdb6501342549787dedaf37d30ac9f69b12cdb00fe8b5a497ebf132da8fb8" name="sblim-gather-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="3d54d04266aaaf205ebe503b59ca5e819ace05c72bbf8776adcc1b742258aed0" name="sblim-gather-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.8" rel="8.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.7-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 2.2.7-3" date="1361966400">- Fixed a typo
- Added missing providers
- improved providers registration
- Fixed owning of filesystem's directories (man)</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-1" date="1363608000">- Update to sblim-gather-2.2.8</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-2" date="1367841600">- Add -fno-strict-aliasing
- Do not ship old init script, add systemd support</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.8-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-5" date="1395057600">- Fix multilib conflicts
  Resolves: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-6" date="1395662400">- Fix failing scriptlets when CIMOM is not running
  Related: #1076428</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-7" date="1456142400">- Fix sblim-gather is installing files under /etc/tmpfiles.d/
  Resolves: #1180992
- Build with PIE and full RELRO
  Resolves: #1092566</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.2.8-8" date="1499774400">- Fix reposd crashes with SIGFPE during calcluation of interval metric when there
  are duplicate data values in the repository
  Resolves: #1467038</changelog>
</package>
<package pkgid="480628d5ae8889a14ae5be5a1b821b7e526c00c96ac5640559bea02f10a42450" name="scl-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="20130529" rel="18.el7_4"/>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20130529-10" date="1417780800">- Allow to use vendor prefix in packages names
- Include %nfsmountable macro into scl's rpm macros file</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-11" date="1418385600">- renamed %scl_pkg_prefix to %scl_full_prefix (#1167042)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-12" date="1418385601">- the second half of the macro rename</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20132529-13" date="1420459200">- after a thorough discussion with scl maintainers, revert the vendor prefix
  in package names</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20130529-13" date="1420545600">- bump the version to get in sync with 7.1 branch
- Reflect the state of %nfsmountable macro in collections' rpm macro files
- escape all the % chars in changelog</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20142529-14" date="1420545601">- remove the vendor prefix from %scl_install</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-15" date="1422360000">- fixed wrong syntax of or-operator in scl.attr</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-16" date="1425556800">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Karddos &lt;lkardos@redhat.com&gt; - 20130529-17" date="1425556801">- Remove /uucp/ from directory structure.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20130529-18" date="1484308800">- fix "scl enable" usage in shebang lines (#1372700)</changelog>
</package>
<package pkgid="f7cebd8a9099f91ba66bb2ca617656ebd1179be703e1580c3c930c201df14ae5" name="skopeo-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.24" rel="1.dev.git28d4e08.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-0.7.git1f655f3" date="1479816000">- runtime dep was missing epoch value, added now</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.17-1" date="1481630400">- Resolves: #1404274 - ship upstream v0.1.17 release
- built commit b3b4e2b</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.18-1" date="1486123200">- btrfs-progs-devel, device-mapper-devel added to build dependencies
- built commit b08008c</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.1" date="1490616000">- rebuilt for all arches on extras 7.4
- enable debuginfo package</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.18-1.2" date="1490875200">- build for all available arches (previous build didn't do this)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.19-1.1.git62e3747" date="1490875201">- bump to v0.1.19
- built commit 62e3747</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.20-1.1.gite802625" date="1496750400">- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Ryan Hartman &lt;rhartman@redhat.com&gt; - 1:0.1.20-2.1.gite802625" date="1498824000">- bump release to 2.1
- built commit e802625b7cb7f4af9ab77bd2be9eb441ff2f28a2</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
</package>
<package pkgid="fa35c54d03524673439ffb196af9b357b2248440732ce2718c2168c6f574fdbc" name="skopeo-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.26" rel="2.dev.git2e8377a.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.23-1.git1bbd87f" date="1502107200">- Resolves: #1455575, #1478416, #1387217
- bump to v0.1.23</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-1.dev.git28d4e08" date="1507291200">- Resolves: #1499274
- built commit 28d4e08</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
</package>
<package pkgid="ac17e8e0080cf7c951cc36a4853ef915edfe5e8ed37663240cd3687f893afaed" name="skopeo-debuginfo" arch="x86_64">
  <version epoch="1" ver="0.1.28" rel="1.git0270e56.el7"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-2.dev.git28d4e08" date="1507809600">- Update container/storage.conf and containers-storage.conf man page
- Default override to true so it is consistent with RHEL.</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.1.24-3.dev.git28d4e08" date="1508414400">- add rhel subscription secrets date to skopeo-containers
- skopeo-containers conflicts with docker &gt;= 2:1.13.1-61</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.24-5.gitdd2c3e3" date="1508760000">- built commit dd2c3e3a8e33b849f3625f4f56fa229c76448629</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 1:0.1.24-8.git28d4e08a" date="1510056000">- Add /usr/share/containers/mounts.conf</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-1.git7fd6f66b" date="1510142400">-   Fix CVE in tar-split
-   copy: add shared blob directory support for OCI sources/destinations
-   Aligning Docker version between containers/image and skopeo
-   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
-   makefile: use -buildmode=pie</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git7fd6f66b" date="1510142401">- Force storage.conf to default to overlay</changelog>
  <changelog author="dwalsh &lt;dwalsh@redhat.com&gt; - 0.1.25-2.git2e8377a7" date="1510747200">-  Add manifest type conversion to skopeo copy
-  User can select from 3 manifest types: oci, v2s1, or v2s2
-   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.26-2.dev.git2e8377a" date="1510833600">- bump changelog</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.27-3.dev.git14245f2" date="1512993600">- rebased to 0.1.27-3.dev.git14245f2</changelog>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1:0.1.28-1.git0270e56" date="1517486400">- rebased to 0.1.28</changelog>
</package>
<package pkgid="a60c0726ec9afb89b494ee24d033d6b3771ba089f2d1c23ed115ccce8cd2b1a4" name="spice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.8" rel="2.el7.1"/>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.12.4-15" date="1443009600">- CVE-2015-5260 CVE-2015-5261 fixed various security flaws
  Resolves: rhbz#1267134</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-16" date="1461585600">- Use autosetup
  Related: CVE-2016-0749
- Fix heap-based memory corruption within smartcard handling
  Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
  Resolves: CVE-2016-2150</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-17" date="1461758400">- Fix crash when the client sends a wrong header (for example when using spice-html5)
  Resolves: rhbz#1281442
- Fix crash when guest provides wrong address
  Resolves: rhbz#1264356
- Fix thread-safety issue causing a crash when playing a Youtube video spanning
  multiple monitors
  Resolves: rhbz#1253375
- Add patches reducing QEMU wake-ups
  Related: rhbz#912763, rhbz#1186146
- Fix use-after-free after resetting a VM
  Resolves: rhbz#1281455
- Send KeepAlive probes every 10 minutes
  Resolves: rhbz#1298590
- Add client to guest volume synchronization
  Resolves: rhbz#1264107</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.12.4-18" date="1467374400">- Fix crash when connecting to VM using smartcard passthrough
  Resolves: rhbz#1340899
- Fix hang after unredirecting a USB device
  Resolves: rhbz#1338752
- Backport spice_qxl_set_max_monitors()
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.4-19" date="1473422400">- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
  Resolves: rhbz#1352836</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.12.4-20" date="1481284800">- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
  messages.
  Resolves: CVE-2016-9577
- Fix remote DoS via crafted message.
  Resolves: CVE-2016-9578</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-1" date="1484568000">- Rebase to spice-server 0.12.8
  Resolves: rhbz#1388947
  Resolves: rhbz#1377551
  Resolves: rhbz#1283202</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2.1" date="1499256000">- Redo build properly versioned as a zstream build
  Related: CVE-2017-7506</changelog>
</package>
<package pkgid="a159769f04526b307d9648909840f188158e13977d8d12baa504f5b53289c551" name="spice-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="663a98ad516a02007f7d025f24ac6bc939c1484f8b5d3b60b22c020555f09d28" name="spice-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.33" rel="6.el7_4.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-6" date="1473422400">- Improve clipboard handling for motif applications
  Resolves: rhbz#1348624</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-7" date="1481284800">- Avoid crash on clipboard due failure in text conversion
  Resolves: rhbz#1385225</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.31-8" date="1481544000">- Fix crash in spicy-stats
  Resolves: rhbz#1403820</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-1" date="1489406400">- Rebase to 0.33
  Resolves: rhbz#1402474
- Rebuilt with correct hardening flags due to bug 1387475
  Resolves: rhbz#1420778
- Fix copy paste issues
  Resolve: rhbz#1409854</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.33-6.1" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1532212</changelog>
</package>
<package pkgid="dbc70baa32433cb6fdb87b1c21a23c004be22abfd4dff61d8ab07ffb1ed1b5ec" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="b0dd21f0aa20b29f2239e131947301c346e53acba7714a3814782a32f3b0c939" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.11"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020800">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.9" date="1515153600">- Resolves: rhbz#1525110 - NSS by-id requests are not checked against
                           max_id/min_id ranges before triggering the
                           backend [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-10" date="1515326400">- Resolves: rhbz#1530975 - sssd_be stuck in an infinite loop after
                           completing full refresh of sudo rules
                           [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50-11" date="1518523200">- Resolves: rhbz#1516700 - SELINUX: Use getseuserbyname to get IPA
                           seuser [rhel-7.4.z]</changelog>
</package>
<package pkgid="9b16d7558d61c780dd6d2e02d04899b9cb71b2b186f41f23277465e7ac1989a5" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="0af22886a320fe9af411fdf1169597a9912dcea4b543b8aed9ce4bb76489ae04" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.2"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-43" date="1496664000">- Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                           properly in v 1.15</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-44" date="1496923200">- Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                           after changing default_domain_suffix to
                           ADdomin in /etc/sssd/sssd.conf</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-45" date="1496923201">- Resolves: rhbz#1449731 - IPA client cannot change AD Trusted User password</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-46" date="1497528000">- Resolves: rhbz#1455254 - Make domain available as user attribute</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528001">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
</package>
<package pkgid="6cb056b4f199883320da6dc715db472fa16b9a4e968c81ae5494e8ef803953b0" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="3dd0b90aa17985802cbf4c0b904e5ca2e3f225ad671399812fc96feeae5b0ce7" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-47" date="1497528000">- Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                           most of the entries once the cleanup task kicks in</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-48" date="1497614400">- Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                           information retured by the KDC during
                           PKINIT/Smartcard authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
</package>
<package pkgid="a9de55638425f1da70ac3abc1065c80e7c6ef8b483fcbd2801f887dbfdd3fca4" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="a2a9d6c3dc3780a2b909c0d67f3728cd4333d586a9024623d4900ca36708e83a" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.2" rel="50.el7_4.8"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-49" date="1498046400">- Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                           from trusted domains with the same name when
                           shortname user resolution is enabled</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50" date="1498046401">- Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                           connected to AD child domain</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.1" date="1502020800">- Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                           [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.2" date="1502020801">- Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                           ID can mark the AD domain offline [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.3" date="1503057600">- Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                           rules refresh [rhel-7.4.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.15.2-50.4" date="1505131200">- Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                           on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.5" date="1505995200">- Resolves: rhbz#1493916 - Issues with certificate mapping rules [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.6" date="1506513600">- Add a patch that was missed in 1.15.2-50.4
- Related: rhbz#1489290 - samba shares with sssd authentication broken
                          on 7.4 [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.7" date="1509105600">- Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                           libldb &gt;= 1.2.0 (1.1.30) [rhel-7.4.z]
- Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                           PAC responder [rhel-7.4.z]
- Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                           searching in local cache database [rhel-7.4.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.15.2-50.8" date="1509710400">- Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                           mapping is applied [rhel-7.4.z]
- Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                           list and a request that is using the list can
                           cause a segfault is sssd_nss [rhel-7.4.z]</changelog>
</package>
<package pkgid="bde38bfcef9e9a56719f5b39a8aca04c3d4084d571c22e174626c373caef26bb" name="storaged-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="4.el7"/>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-3" date="1435147200">- Changes for EPEL-7
  - Lower systemd required version to 208
  - Rewrite BuildRequires for systemd-devel</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.0-4" date="1435147201">- Add Requires for storaged modules</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.1.1-1" date="1436184000">- Upgrade to 2.1.1
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-1" date="1440504000">- Upgrade to 2.2.0
- Related: rhbz#1227797</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-3" date="1440676800">- Rebuild to fix upgrade path</changelog>
  <changelog author="Peter Hatina &lt;phatina@redhat.com&gt; - 2.2.0-4" date="1460116800">- Fix segfault when no configuration is given for a LUKS device
- Resolves: rhbz#1324209</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-1" date="1465387200">- Upgrade to 2.5.2
- Resolves: rhbz#1340359</changelog>
  <changelog author="Tomas Smetana &lt;tsmetana@redhat.com&gt; - 2.5.2-2" date="1468238400">- Enable iSCSI support only when the necessary API is available
- Resolves: rhbz#1352454</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 2.5.2-3" date="1492084800">- Bump and rebuild for all architectures</changelog>
  <changelog author="Vratislav Podzimek &lt;vpodzime@redhat.com&gt; - 2.5.2-4" date="1498564800">- Fix seg fault in udiskslvmhelper
  Resolves: rhbz#1436914
- lvm2daemonutil.c: Close FD for spawned process
  Resolves: rhbz#1463843</changelog>
</package>
<package pkgid="4d3907f5968dc7f39e566aadc1b68d19fc890c0c881f4e7b5e8acf78f056cbe7" name="subversion-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="1a158219ececd8421e42a7b8df531353dcc0c9e245d8de58aaa741f390d6ee25" name="subversion-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.14" rel="11.el7_4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-1" date="1385467200">- update to 1.7.14 (#1034377)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-3" date="1389614400">- rebuild for #1029360</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7.14-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-5" date="1392120000">- add fix for CVE-2014-0032</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-6" date="1394020800">- drop dependency on db4-devel (#1072969)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-7" date="1420804800">- add security fixes for CVE-2014-3528, CVE-2014-3580, CVE-2014-8108</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-8" date="1436270400">- build with full RELRO (#1092533)
- fix rebuild under root user (#1035340)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-10" date="1439380800">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3184,
  CVE-2015-3187</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.7.14-11" date="1502280000">- add security fix for CVE-2017-9800</changelog>
</package>
<package pkgid="b92aea16da46767a4b27fea92beba02dd623f4cd76cf5544777b0f49c686e996" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="4657765b9a72a6de403ef85e09abc17e98d4cca353ca494194cae37f2012a1fd" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="11.el7_4"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-2" date="1488974400">- RHEL 7.4 erratum
- Fixes coverity scan issues created by our patches: 
  - fixed resource leaks and a compiler warning in digest backport patch
  - removed needless code from cmnd_no_wait patch causing clang warning
  - format of the last changelog message causes problems to rhpkg push,
    so don't use that as a commit message 
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-3" date="1488974401">- RHEL 7.4 eratum
- Fixes semicolon typo in digest backport patch from the previous build
  Resolves: rhbz#1360687</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.19p2-4" date="1490097600">- RHEL 7.4 erratum
- fixed cmnd_no_wait patch
- backported iolog_flush sudoers default
  Resolves: rhbz#1369856
  Resolves: rhbz#1425853</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1503057600">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1482929</changelog>
</package>
<package pkgid="be249bc4abd604298af051f9b8a6e1efb109c7d5850ba7b5242bcf320c9b25e3" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="8fbf1996f76ece4df9718ab5f5792bbdc5e631a28ef77fbd8b135b574b5d8997" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-34" date="1491912000">- rules/40-redhat.rules: rules should be on one line (#1274401)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-35" date="1491912001">- tmpfiles: add new 'e' action which cleans up a dir without creating it (#1225739)
- util:bind_remount_recursive(): handle return 0 of set_consume() (#1433687)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-36" date="1492084800">- spec cleanup (#1439787, #1392300, #1368929)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
</package>
<package pkgid="0c4a65fd09e6559603de7dad5a0ce006eaaace38b5125887c0c530272738148f" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="6fa421225c67e7ae7422c8b87de921f6eaf3ccc0da58102dc25f8bac640a0d22" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.10"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.8" date="1518523200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.9" date="1519041600">- core:execute: fix fork() fail handling in exec_spawn() (#1437114)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.10" date="1519214400">- journal: remove error check that never happens (#1465759)
- sd-journal: various clean-ups and modernizations (#1465759)
- journalctl: continue operation, even if we run into an invalid file (#1465759)
- journalctl: when we fail to open a journal file, print why (#1465759)
- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)</changelog>
</package>
<package pkgid="88062f11d9092592640b78c238c4ebd9c0d5742a9f5871cec46102c84bb40db2" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="da25e182660d512a7d4669c0cb948df658521d266dc61668450414c0c8b23f6e" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.4"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-37" date="1492603200">- core: add support for the "pids" cgroup controller (#1337244)
- core: add new DefaultTasksMax= setting for system.conf (#1337244)
- logind: add a new UserTasksMax= setting to logind.conf (#1337244)
- core: support percentage specifications on TasksMax= (#1337244)
- core: reinstate propagation of stop/restart jobs via RequsiteOf dependencies (#1436021)
- core: when propagating restart requests due to deps, downgrade restart to try-restart (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-38" date="1492689600">- core: properly handle jobs that are suppressed to JOB_NOPs when propagating restarts (#1436021)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
</package>
<package pkgid="4e0b2ba8f6c9cbd4e63879331cc767491c40277047e1ae3489cecaf5710cf605" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="d1ef54ac366794cc62510dad8dfdbbf66a0822ba86b0da174adf7257288642f6" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-39" date="1493726400">- tests: set tasks_max to infinity (#1337244)
- Avoid forever loop for journalctl --list-boots command (#4278) (#1294516)
- sd-journal: return SD_JOURNAL_INVALIDATE only if journal files were actually deleted/moved (#5580) (#1446140)
- load-fragment: don't print error about incorrect syntax when IPv6 is disabled (#1377055)
- core: manager: add some missing dbus properties (#1427927)
- core: manager: expose DefaultLimit* as properties on dbus (#1427927)
- fstab-generator: remove bogus condition (#1446171)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
</package>
<package pkgid="828f290e5a60d2904d260aecec6c4f5d073a344982e12889f16f489747f03da0" name="systemd-debuginfo" arch="i686">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="4d550e6824ea879a6b6dc8fc1eedb08d990108ed1b7f38283189e3f9eb2117e5" name="systemd-debuginfo" arch="x86_64">
  <version epoch="0" ver="219" rel="42.el7_4.7"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-40" date="1496145600">- readahead-collect: don't print warning message when handling symlink (#1387095)
- tmpfiles: don't recursively descend into journal directories in /var (#1411199)
- tmpfiles: also set acls on /var/log/journal (#1411199)
- tmpfiles: set acls on system.journal explicitly (#1411199)
- sysctl: configure kernel parameters in the order they occur in each sysctl configuration files (#4205) (#1382244)
- units: drop explicit NotifyAccess setting from journald's unit file (#5749) (#1444356)
- systemd-notify: Always pass a valid pid to sd_pid_notify (#1381743)
- sd_pid_notify_with_fds: fix computing msg_controllen (#1381743)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-41" date="1497268800">- rules: move cpu hotplug rule to separate file (#1266322)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42" date="1498564800">- Revert "rules: move cpu hotplug rule to separate file" (#1465108)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.1" date="1502798400">- Revert "udev: net_id: add support for phys_port_name attribute (#4506)" (#1477285)
- reintroduce naming based on phys_port_name for mlxsw and rocker via udev rule</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.2" date="1505995200">- sysctl: fix uninitialized variable (#1485121)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.3" date="1506340800">- udev: ignore SIGCHLD from unexpected processes (#1306539) (#1306539)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.4" date="1506686400">- manager: when reexecuting try to connect to bus only when dbus.service is around (#6773) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.5" date="1512648000">- unmount: Pass in mount options when remounting read-only (#1312002)
- shutdown: don't remount,ro network filesystems. (#6588) (#1312002)
- shutdown: fix incorrect fscanf() result check (#6806) (#1312002)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.6" date="1515499200">- manager: fix connecting to bus when dbus is actually around (#7205) (#1465737)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-42.7" date="1516190400">- automount: ack automount requests even when already mounted (#1535135)</changelog>
</package>
<package pkgid="bae1377a5ff9ef0917d5f5c29c9bceab62501ad13e88091f185a810c6598c41b" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="c6f666bcfc7d34b29dc49c4b770a85905e07f3aa9dbee72f725fcad21ac5f06a" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-2" date="1462363200">- 4 upstream patches for kernel lockdep hygiene, bz1242368</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
</package>
<package pkgid="7d6d7d43deca2a2b8dc7eee9052072a19508e42c23003cf6b2463f20efbe6b1d" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="d1049fa2e741999034a1c254bea54c33fbbc1064348883a209d2541f481719a8" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1" rel="5.el7_4"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-3" date="1469102400">- rhbz1346112 delay tls cert creation
- rhbz1269062 null elevator
- rhbz1337416 'count' tapset variable - autocast/@defined</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-4" date="1470744000">- rhbz1365550 PR19874 alarm(60) in staprun system()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-5" date="1470916800">- rhbz1312169 stap-prep debuginfo-install improvement</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-6" date="1472040000">- rhbz1346112 delay tls cert creation redux</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.0-7" date="1474286400">- rhbz1376515 ppc64le probe point / parameter value fix</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-1" date="1487332800">- Upstream release.</changelog>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-4" date="1508414400">- rhbz1503979 @min/@max miscalculation</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.1-5" date="1512302400">- rhbz1519860 netdev probe</changelog>
</package>
<package pkgid="05b4b0ea9a507b46fdf5a931c6860d9ba567a2b0a9269717bd3cd8bb62093ff4" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.3.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
</package>
<package pkgid="1edbef86b5620c1e1d03942373d004462e823b820f67e509ca4d56323c6c3d93" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.4.0" rel="2.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="693d3fd1263dded9f46dbaa14056ef149f09f2439db9e7138d482b2d08d46337" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.0" rel="1.el7_4"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
</package>
<package pkgid="0789d17f1529dbb8ed1ff64cc392839e7e0d82f1699f02e5aa593b912664534b" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.5.2" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
</package>
<package pkgid="2576a9f4bf2a1e7088eddae1c10d18e902dbe1003c37906c697d92a6f5db75de" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="098eea3c5f15c22d2ae7eb04e946f3be426cc3cf166d857fa111504142eed054" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.0" rel="1.el7_4"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
</package>
<package pkgid="20b2aaae8c01ea10dc65f1e08392b6489b8979aa41a1234501ffc51421231a3b" name="tigervnc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="2.el7_4"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-7" date="1464177600">- Restore default behaviour to listen on TCP
  Resolves: bz#1304646</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.1-8" date="1464868800">- Make other security types work
  Resolves: bz#1341969</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-9" date="1473768000">- Force DT_RUNPATH to point to Mesa's libGL
  Resolves: bz#1326867</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-1" date="1487678400">- Update to 1.7.1
  Resolves: bz#1388620
  Resolves: bz#1343899
  Resolves: bz#1410164
  Resolves: bz#1415547
  Resolves: bz#1418945
  Resolves: bz#1416290
  Resolves: bz#1342956
- Fix shared memory leakage
  Resolves: bz#1358090
- Added systemd unit file for xvnc
  Resolves: bz#1393971</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-2" date="1491393600">- Be more restrictive with shared memory mode bits
  Resolves: bz#1152552
  Limit max username/password size in SSecurityPlain [CVE-2017-7394]
  Resolves: bz#1438737
  Fix crash from integer overflow in SMsgReader::readClientCutText [CVE-2017-7395]
  Resolves: bz#1438742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.1-3" date="1491393601">- Delete underlying ssecurity in SSecurityVeNCrypt [CCVE-2017-7392]
  Resolves: bz#1439127
  Prevent double free by crafted fences [CVE-2017-7393]
  Resolves: bz#1439134</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-1" date="1492689600">- Update to 1.7.90
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.7.90-2" date="1493726400">- Make RandR callbacks optional
  Resolves: bz#1444948</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-1" date="1495022400">- Update to 1.8.0
  Resolves: bz#1388620</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-2" date="1507809600">- Make TLS work on FIPS systems
  Resolves: bz#1501165</changelog>
</package>
<package pkgid="250c50530679f9e7bcd7d832f936125b8aa21a449a141c7c6a5f2d176e2607e4" name="util-linux-debuginfo" arch="i686">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="8f52af731a031247332a021eb806845d9a7e1ad206dfa556d31044d724b59f12" name="util-linux-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="43.el7_4.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-36" date="1490184000">- fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
- fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
- fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
- fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
- fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
- fix #1369436 - losetup man page incorrect syntax for Setup loop device
- fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
- fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
- fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
- fix #1417722 - umount -a results in selinux being reported as Disabled
- fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
- fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
- fix #1403971 - /usr/bin/more crash in end_it due to double free
- fix #1358095 - ipcs shows wrong gid information
- fix #1358097 - ipcs shows strange status message in ja locale
- fix #1378100 - fix swapon discard option parsing
- fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
- fix #1358755 - Backport request for zramctl on util-linux v2.23.2
- fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
- fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
- fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
- fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-37" date="1490875200">- improve zram mm_stat parser (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-38" date="1491307200">- improve fdisk menu for GPT (#1344720)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-39" date="1491307201">- update package regression tests (due to #1360764 #1397709)
- improve zramctl man page (#1358755)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-40" date="1494417600">- improve libfdisk GPT UUID printing (#1344726)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-41" date="1495540800">- fix #1451704 - IMSM RAID on 4k disks not assembled on boot
- force gettext messages refresh (for #1358097 bugfix)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-42" date="1496232000">- fix #1455664 - lscpu causes kernel panic on HPE Comanche / Cavium ThunderX2 (cn99xx)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43" date="1496318400">- fix #1457744 - lscpu -e get crashed after offline one host cpu on amd machine</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.1" date="1509364800">- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-43.el7_4.2" date="1510228800">- improve libmount eaccess test (bug #1499760)</changelog>
</package>
<package pkgid="f377715d0ffa1cf8f8256df579b0f6f5c629d54f16931f2d27a0285c93c38cfe" name="valgrind-debuginfo" arch="i686">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="4d4ac7092077be86b1fa249bd1dcdf81ecc062393389dd1d394b24989b2c48f4" name="valgrind-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.12.0" rel="9.el7_4"/>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-15" date="1440676800">- Add valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.10.0-16" date="1440763200">- Patch both 32 and 64 in valgrind-3.10.1-ppc32-tabortdc.patch (#1257623)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-20" date="1460721600">- Rebase to fedora 3.11.0
  (#1316512 #1306844 #1305962 #1298888 #1296318 #1271754 #1265566 #1265557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-21" date="1461931200">- Add valgrind-3.11.0-deduppoolalloc.patch (#1328347)
- Add valgrind-3.11.0-ppc-bcd-addsub.patch (#1331738)
- Add valgrind-3.11.0-ppc64-vgdb-vr-regs.patch (#1331774)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-22" date="1464609600">- Add valgrind-3.11.0-arm64-handle_at.patch
- Add valgrind-3.11.0-ppc64-syscalls.patch</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-23" date="1466510400">- Update valgrind-3.11.0-ppoll-mask.patch (#1347626)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.11.0-24" date="1469102400">- Add valgrind-3.11.0-pcmpxstrx-0x70-0x19.patch (#1354557)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-7" date="1487419200">- Rebase to 3.12.0 fedora backports (#1391217, #1385006, #1368706, #1270889)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-8" date="1490702400">- Add valgrind-3.12.0-powerpc-register-pair.patch (#1437030)
- Add valgrind-3.12.0-ppc64-isa-3_00.patch (#1437032)</changelog>
  <changelog author="Mark Wielaard &lt;mjw@redhat.com&gt; - 3.12.0-9" date="1505995200">- Add valgrind-3.12.0-ll-sc-fallback[1234].patch (#1492753)</changelog>
</package>
<package pkgid="58377b40684df6ed71179f2f9d65fc5654d95ddb8092896d494be02721e981e7" name="webkitgtk4-debuginfo" arch="i686">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="37cdc15f5afd781bb3b9b0b400c23ed026c648760e96b416c87fb8dcd872d0a1" name="webkitgtk4-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.14.7" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.5-5" date="1490097600">- Add more Coverity scan fixes
- Remove icu from sources
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-1" date="1491825600">- Update to 2.14.6
- Resolves: rhbz#1440681
- Don't crash is no render is available in AX render object
- Resolves: rhbz#1437672</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-2" date="1493035200">- Bundle icu57
- Resolves: rhbz#1414413</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-3" date="1493035201">- Bundle only needed icu libraries
- Don't list bundled icu libraries in provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-4" date="1493121600">- Use the right function for removing from provides
- Resolves: rhbz#1383614</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.6-5" date="1493208000">- Don't require icu libraries that are bundled
- Resolves: rhbz#1414413</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.14.6-6" date="1494417600">- Add upstream patch to fix login to Google account
- Resolves: rhbz#1448192</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-1" date="1496318400">- Update to 2.14.7
- Backport more of a11y fixes from upstream
- Fix JSC crashes on big endian arches
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-2" date="1497614400">- Fix a CLoop patch that was not correctly backported from upstream, causing
  crashes on big endian machines
- Resolves: rhbz#1442160</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.14.7-3" date="1507550400">- Update the bundled brotli and woff2 to the latest releases due to
  woff2's license incompatibility with WebKitGTK+ project
- Resolves: rhbz#1500368</changelog>
</package>
<package pkgid="7f6b8ccf6c615c3b3dfcf18b33c4cead3a92eed25fd8d54abddb0cec4c017ef9" name="wget-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14" rel="15.el7_4.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-7" date="1373457600">- Fix double free of iri-&gt;orig_url (#981778)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-8" date="1373889600">- Fix deadcode and possible use of NULL in vprintf (#913153)
- Add documentation for --regex-type and --preserve-permissions
- Fix --preserve-permissions to work as documented (and expected)
- Fix bug when authenticating using user:password@url syntax (#912358)
- Document and fix --backups option</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.14-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-11" date="1414152000">- Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access (#1156136)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-12" date="1458561600">- Fix wget to include Host header on CONNECT as required by HTTP 1.1 (#1203384)
- Run internal test suite during build (#1295846)
- Fix -nv being documented as synonym for two options (#1147572)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-13" date="1466424000">- Fix CVE-2016-4971 (#1345778)
- Added support for non-ASCII URLs (Related: CVE-2016-4971)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-14" date="1491998400">- TLS v1.1 and v1.2 can now be specified with --secure-protocol option (#1439811)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15" date="1493985600">- Added TLSv1_1 and TLSv1_2 as secure-protocol values to help (#1439811)
- Fixed synchronization in randomly failing unit test Test-proxied-https-auth (#1448440)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.14-15.1" date="1508846400">- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)</changelog>
</package>
<package pkgid="7aa55d738865c7d37959952a58105459243dd24ff8fd25f12674d47a679998d1" name="wpa_supplicant-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.6" rel="5.el7_4.1"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-19" date="1452513600">- nl80211: resubscribe to netlink events when cfg80211 gets re-added (rh #1085473)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.0-20" date="1458561600">- D-Bus: Don't do &lt;deny send_interface="..." /&gt; in dbus service file (rh #1319796)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-21" date="1470744000">- fix wpa_supplicant.sysconfig to avoid duplicate -u and -f arguments (rh #1351388)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.0-22" date="1481889600">- bump revision for RHEL7.4 rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-1" date="1486728000">- Update to 2.6 (rh #1404793)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-2" date="1488888000">- Backport support for IEEE 802.1AE MACsec (rh #1338005)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-3" date="1489147200">- Fix coverity failures (rh #1430407)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5.1" date="1507896000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
</package>
<package pkgid="8c07a13b58e5bc85536bff39105aaabfc7e8c771190a3758ff0ac56522b3f562" name="xmlsec1-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="a9ecf8750e45156555709ea5df78fad9770e771c16c78f257a3116d751ec382e" name="xmlsec1-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.20" rel="7.el7_4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.2.19-4" date="1398340800">- Rebuild for new libgcrypt</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472092</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Fix mis-applied patch hunk</changelog>
</package>
<package pkgid="4f6819276c61a6fbe88884daa3db61d6f3626b05212d713b6b522ed496a64a35" name="xorg-x11-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="cb6965520fe2d1c3506f2569468081e8134f965c4ae4d6fa9c904a6a5855a85a" name="xorg-x11-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.1"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; - 1.19.3-3" date="1493294400">- Default to modesetting driver on NVIDIA GeForce 8 and newer</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
</package>
<package pkgid="9922ca7d3b317753b7a7b22423bc14cbbf6bd638332433b64f48a1c9e4438de4" name="xorg-x11-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
<package pkgid="d76412a7e8d48ab4b5358818c157106cf4e4f3ee150ddca0ab20368b9a2cd669" name="xorg-x11-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19.3" rel="11.el7_4.2"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-4" date="1494331200">- Fix performance problem in dashed arc drawing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-5" date="1494331201">- Fix software cursor fallback for the modesetting driver on server GPUs</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.19.3-6" date="1497009600">- Don't crash on NULL cursor in modesetting driver (#1458361)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-7" date="1497268800">- Fix a crash in FixesGetCursor*</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-8" date="1497873600">- Validate RANDR output property atoms</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-9" date="1497873601">- Remove clients from input and output ready queues after closing</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-10" date="1498478400">- Fix modesetting initialization on non-zero PCI domains</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11" date="1498478401">- Fix off-by-one in X -configure</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.1" date="1512993600">- Fix a crash in RANDR gamma/colormap setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.19.3-11.2" date="1519214400">- Fix fetching animated cursor images with the XFIXES extension</changelog>
</package>
</otherdata>